Documentl Pagel of95 A0 91 (Rev. 1) Criminal Complaint UNITED STATES DISTRICT COURT forthe MAR 25 2015 Northem District of California RICHARD W. WIEKING CLERK. U.S. DISTRICT COURT NORTHERN OF CALIFORNIA ited States of America v. 1'5" ARL MARK FORCE IV. et al case Defendant(s) CRIMINAL COMPLAINT I, the complainant in this case, state that the following is true to the best of my knowledge and belief. On or about the date(s) of 2012 through 2013 in the county of San in the Northern District of California the defendant(s) violated: Code Section Offense Description 18 U.S.C. Section 641 Theft of Government Property 18 U.S.C. Section 1343 Wire Fraud 18 U.S.C. Section 1956(h) Money Laundering 18 U.S.C. Section 208 Con?ict of Interest This criminal complaint is based on these facts: See Af?davit of Special Agent Tigran Gambaryan (attached) Approved as to form: AUSA Haun Complainant 's signature El Continued on the attached sheet. Tigran Gambaryan, IRS-Criminal Investigations Printed name and title Sworn to before me and signed in my presence. i Judge ?3 signature City and state; San Francisco, CA Hon. Maria-Elena James, U.S. Magistrate Judge Printed name and title Documentl Page2 of95 MELINDA HAAG (CABN 132612) United States Attorney DAVID R. CALLAWAY (CABN 121782) Chief, Criminal Division HAUN (DCBN 484131) WILLIAM FRENTZEN (LABN 24421) Assistant United States Attorneys 450 Golden Gate Avenue, Box 36055 San Francisco, California 94102-3495 Telephone: (415) 436-7200 FAX: (415) 436-7234 . gov William.frentzen@usdoj . gov RAYMOND N. HULSER (MABN 551350) Acting Chief, Public Integrity Section RICHARD B. EVANS (DCBN 441494) Trial Attorney 1400 New York Avenue, NW. Washington, DC. 20005 Telephone: (202) 353-7760 Richard.B.Evans@usdoj.gov Attorneys for United States of America UNITED STATES DISTRICT COURT NORTHERN DISTRICT OF CALIFORNIA SAN FRANCISCO DIVISION UNITED STATES OF AMERICA, v. CARL M. FORCE IV and SHAUN W. BRIDGES, Defendants. AFFIDAVIT OF SPECIAL AGENT TIGRAN GAMBARYAN IN SUPPORT OF CRIMINAL COMPLAINT I, Tigran Gambaryan, being ?rst duly sworn, hereby depose and state as follows: AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT Documentl Page3 of95 I. INTRODUCTION AND AGENT BACKGROUND The following af?davit is made in support of a criminal complaint and arrest warrant for Carl Mark FORCE IV for violations of 18 U.S.C. Section 1343 (Wire Fraud); 18 U.S.C. Section 641 (Theft of Government Property); 18 U.S.C. Section 1956 (Money Laundering); and 18 U.S.C. Section 208 (Con?ict of Interest) and also in support of a criminal complaint and arrest warrant for Shaun W. BRIDGES for violations of 18 U.S.C. Section 1343 (Wire Fraud) and 18 U.S.C. Section 1956 (Money Laundering). I am a Special Agent with the Criminal Investigation Division of the Internal Revenue Service (IRS), in the Northern District of California and have been since 2011. I am currently the group?s Cyber Crimes Unit Liaison. Prior to that, my background was as an auditor for Califomia?s Franchise Tax Board where I investigated abusive tax shelters. My training and experience includes, but is not limited to, investigations involving money laundering, white collar fraud, public corruption, organized crime, and violations of the Bank Secrecy Act and tax code. I have developed a specialty in cyber and digital currency crimes. I am involved in an investigation into members of the Baltimore Silk Road Task Force to include former Drug Enforcement Administration Agent Carl Mark FORCE IV (FORCE) and former Secret Service Agent Shaun BRIDGES (BRIDGES). This is a bicoastal investigation that is based in San Francisco, being handled by the US. Attomey?s Of?ce for the Northern District of California and the Public Integrity Section in Washington DC. In this investigation, I am joined by several co-case agents, to include Special Agents and a Staff Operations Specialist from the Federal Bureau of Investigation (FBI) San Francisco Division?s Public Corruption Squad, which investigates abuse of public of?ce in violation of criminal law to include ?'aud, bribery, extortion, con?icts of interest, and embezzlement. I am also joined in this investigation by the Department of Justice?s Of?ce of the Inspector General (DOJ OIG) and the Department of Homeland Security?s Of?ce of the Inspector General (DHS OIG), both of which investigate and prosecute fraud and abuse by federal of?cials. - The facts in this af?davit come from my personal observations, my training and experience, and information obtained from other agents and witnesses. This af?davit is intended to show merely that AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 2 Documentl Filed03/25/fqn?N Page4 of95 there is suf?cient probable cause for the requested complaint and warrants and does not set forth all of my knowledge about this matter. II. SUMMARY The government had multiple investigations into the Silk Road marketplace, an underground black market that allowed vendors and buyers to conduct illegal transactions over the intemet. One of these investigations was conducted in the Southern District of New York, and the other was conducted out of Baltimore in the District of Maryland. Both FORCE and BRIDGES were assigned to the Baltimore investigation and not the New York investigation. The two investigations were conducted independently of each other. Throughout 2012 and 2013, both FORCE and BRIDGES had signi?cant responsibilities related to Baltimore?s investigation. In this capacity, FORCE was the lead undercover agent in communication with DPR, the owner, administrator and operator of the Silk Road website.l BRIDGES was the computer forensics expert on the Baltimore investigation. In their capacity as members of the Baltimore Silk Road Task Force, both FORCE and BRIDGES had signi?cant exposure to and developed expertise in the digital currency known as Bitcoin. As will be described further herein, FORCE and BRIDGES abused their positions as federal agents and engaged in a scheme to defraud a variety of third-parties, the public, and the government, all for their own ?nancial enrichment. With respect to former Drug Enforcement Administration (DEA) Special Agent FORCE, the investigation has revealed among other things that: a. FORCE created certain ?ctitious personas -- that were not of?cially sanctioned -- to communicate with DPR, the target of investigation. Using one of these personas, FORCE sought to extort DPR by seeking monetary payment, offering in exchange not to provide the government with certain information if DPR paid $250,000; b. FORCE acted outside the scope of his of?cial role on the Baltimore Silk Road Task Force and created a ?ctitious persona named ?French Maid.? Operating as ?French Until October 1, 2013, DPR was known to FORCE and the rest of the Baltimore Silk Road Task Force only by his online moniker ?Dread Pirate Roberts? or Ulbricht was known on the Silk Road site by the moniker ?Dread Pirate Roberts? (DPR) and is referred to hereafter interchangeably as and ?Ulbricht.? AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 3 Documentl FiledOB/ZS/g PageS of95 Maid,? FORCE fraudulently represented to DPR certain information conceming ?French Maid?s? true identity and offered to sell DPR information about the govemment?s investigation into Silk Road in exchange for approximately $100,000 worth of bitcoin, which DPR paid and FORCE deposited into his own personal accounts; FORCE stole and converted to his own personal use a sizeable amount of bitcoins that DPR sent to FORCE in of?cial undercover capacity and rather than turning those bitcoin over to the government, FORCE deposited them into his own personal accounts; FORCE engaged in a series of complex transactions between various Bitcoin accounts (known as Bitcoin addresses), his personal digital currency accounts, and his personal bank accounts, including a $235,000 wire to an overseas account in Panama, all in an effort to launder and conceal the true source of the ill-gotten proceeds; FORCE used his of?cial position as a DEA agent to illegally run criminal history checks on individuals for the bene?t of a third-party digital currency exchange company, in which FORCE had personally invested approximately $110,000 worth of bitcoin; FORCE ?mctioned as the de facto Chief Compliance Of?cer for all the while employed as a DEA agent, even allowing himself to be featured in CoinMKT?s ?pitch decks? to venture capital investors and allowing himself to be listed as CoinMKT?s anti- money laundering and/or compliance of?cer in order to bene?t (a company in which FORCE had invested); FORCE improperly directed to freeze one of its individual customer?s accounts containing a large amount of digital currency, worth approximately $297,000, even though he lacked a suf?cient legal basis on which to do so, and FORCE then illegally seized those funds and transferred them into his own personal account; and FORCE used his supervisor?s signature stamp, without authorization, on an of?cial US. Department of Justice subpoena and sent the subpoena to a payments company, Venmo, directing the company to unfreeze his own personal account, which had been previously AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 4 Documentl Page6 of95 frozen due to certain suspicious activity. FORCE then sought to conceal evidence of his improper use of an of?cial subpoena by directing the company not to contact the DEA and attempting to destroy copies of the subpoena. When the company did not comply, FORCE asked another agent on the Baltimore Silk Road Task Force, an IRS agent, to collaborate with him on seizing that company?s bank accounts. With respect to former US. Secret Service Special Agent BRIDGES, the investigation has revealed among other things that: a. In late January 2013, members of the Baltimore Silk Road Task Force, to include BRIDGES and FORCE, gained access to a Silk Road website administrator account as a result of the arrest of a former Silk Road employee. On January 25, 2013, the Silk Road website suffered a sizeable theft of bitcoins, bitcoins which were moved into Mt. Gox, a digital currency exchange based in Japan; On February 12, 2013, BRIDGES formed and registered a personal limited liability company called ?Quantum International Investments, (Quantum), and on February 22, 2013, BRIDGES opened an account at Fidelity Investments (Fidelity) in the name of Quantum; According to records obtained from Fidelity, BRIDGES funded his Quantum Fidelity account exclusively with wire deposits from Mt. Gox in Japan. Speci?cally, between March 6, 2013 through May 7, 2013, Quantum Fidelity account in the United States received nine wire transfers from Mt. Gox totaling approximately $820,000; Despite having personally bene?tted in the amount of $820,000 from a Mt. Gox account and receiving a large wire on May 7, 2013 from Mt. Gox, just two days later on May 9, 2013, BRIDGES served as the af?ant on a multi-million dollar seizure warrant for Mt. Gox and its owner?s bank accounts; and Upon learning of the govemment?s criminal investigation into the Baltimore Silk Road Task Force based in the Northern District of California, and following an interview by the FBI as part of the criminal investigation, BRIDGES transferred over $250,000 out of AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 5 Documentl FiledOB/ZS/g Page? of95 his Quantum Fidelity account via wire transfers into another bank account held by himself and a third-party. Because this af?davit is for the limited purpose of establishing probable cause for the crimes proposed to be charged at the present time, it does not include certain additional facts known to me and the govemment?s investigation continues. RELEVANT STATUTES Based on my training and experience and the facts as set forth in this af?davit, there is probable cause to believe that FORCE has committed violations of law to include Title 18, United States Code, Section 1343 (Wire Fraud), Title 18, United States Code, Section 641 (The? of Government Property), Title 18, United States Code, Section 1956 (Money Laundering), and Title 18, United States Code, Section 208 (Con?ict of Interest). There is also probable cause to believe that BRIDGES has committed violations of law to include Title 18, United States Code, Section 1343 (Wire Fraud) and Title 18, United States Code, Section 1956 (Money Laundering). Title 18 U.S.C. 641 prohibits embezzling, stealing, or converting any property belonging to the United States worth more than $1,000. The essential elements of this offense are: (1) the defendant knowingly embezzled, stole, or converted to the defendant?s use or the use of another the money or property of value with the intention of depriving the owner of the use or bene?t of the money or property; (2) the money or property belonged to the United States; and (3) the value of the money or property was more than $1,000. Ninth Circuit Instruction 8.39. Title 18 U.S.C. 1343 prohibits wire fraud. The essential elements of this offense are: (1) the defendant knowingly participated in, devised or intended to devise a scheme or plan to defraud, or a scheme or plan for obtaining money or property by means of false or fraudulent pretenses, representations, or promises; (2) the statements made or facts omitted as part of the scheme were material, that is they had a natural tendency to in?uence, or were capable of in?uencing, a person to part with money or property; (3) the defendant acted with the intent to defraud, that is, the intent to deceiVe or cheat; and (4) the defendant used, or caused to be used, a wire communication to carry out. or attempt to carry out an essential part of the scheme. gag Ninth Circuit Instruction 8.124. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 6 Documentl Filed03/25//;? Page8 of95 Title 18 U.S.C. l956(a)(l)(B)(i) prohibits the laundering of proceeds from ?speci?ed unlawful activity? (SUA). The essential elements are: (1) the defendant conducted or intended to conduct a ?nancial transaction involving property that represented the proceeds of speci?ed unlawful activity; (2) the defendant knew that the property represented the proceeds of speci?ed unlawful activity; (3) the defendant knew the transaction was designed in whole or in part to conceal or disguise the nature, location, source, ownership, or control of the proceeds of the speci?ed unlawful activity; and (4) the defendant did something that was a substantial step toward committing the crime. Ninth Circuit Model Jury Instruction 8.147. The money laundering statute speci?cally identi?es both 1343 wire fraud and 641 theft of government property as ?speci?ed unlawful activity.? Title 18 U.S.C. 208 prohibits federal employees from taking certain acts affecting a personal ?nancial interest. Although there is no Ninth Circuit model instruction for this statute, caselaw establishes that the essential elements are: (1) the defendant was an of?cer or employee of the Executive Branch of the United States; (2) the defendant participated personally and substantially as a government employee through decision, approval, disapproval, recommendation, rendering of advice, investigation or otherwise in a matter; and (3) the defendant knew that he had a ?nancial interest in the particular matter in which he was participating. IV. BACKGROUND FORCE was employed as a DEA Special Agent for approximately 15 years. He began his career with the DEA in September 1999 and served in Denver, Puerto Rico, and Baltimore. FORCE resigned on May 4, 2014, shortly after law enforcement began the current investigation. FORCE received approximately $150,000 in annual salary from the DEA. Based on my investigation, during the relevant timeframe of 2012 into 2014, his wife was a homemaker and the household had no signi?cant outside income. FORCE used one of his personal bank accounts to receive several large international and domestic wire and Automated Clearing House (ACH) transfers throughout the latter half of 2013 and ?rst half of 2014. I have reviewed bank records, and two personal checking accounts in name reveal incoming deposits totaling at least approximately $757,000 for the roughly year AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 7 Documentl Page9 of95 long period beginning April 2013 through May 2014.2 This does not include amounts deposited from May 2014 onward. I have also learned through my investigation that during this timeframe FORCE paid off his mortgage, a government thrift savings plan loan, and wrote several very large checks for tens of thousands of dollars. In 2014, FORCE made investments in real properties, in businesses, and wired hundreds of thousands of dollars into an overseas account. From 2013 through the present, FORCE has held numerous accounts in his own name and with his own personal identi?ers3 at a variety of digital currency exchanges around the world, including in the Northern District of California. Moreover, in April 2014, FORCE established a company called Engedi, LLC. According to documents ?led with the Maryland Secretary of State, Engedi, purpose is to speculate and invest in Bitcoin. Like FORCE, BRIDGES was a member of the Baltimore Silk Road Task Force. Until his abrupt resignation on March 18, 2015, after leaming he was a subject of this investigation, BRIDGES was employed as a US. Secret Service Special Agent for approximately six years. He began his career with in October 2009 and served in its Baltimore Field Of?ce. After the Baltimore Silk Road Task Force ended, BRIDGES remained part of the Electronic Crimes Task Force in Maryland. In this role, he served as the af?ant on numerous seizure warrants. On January 25, 2013, the Silk Road website suffered a sizeable theft of Bitcoin, a theft with which BRIDGES was associated. For reasons discussed below, I believe the proceeds of this theft were transferred to the Mt. Gox exchange in Japan. On February 12, 2013, not long after the Silk Road thefts occurred, BRIDGES formed a company called Quantum International Investments, LLC (Quantum). On February 22, 2013, BRIDGES established a personal investment account at Fidelity Investments (Fidelity) in the name of Quantum. BRIDGES used that Fidelity account to receive several large international wire transfers from Japan, speci?cally from Mt. Gox, throughout the March through May 2013 timeframe. There were nine 2 Approximately $330,000 was deposited in 2013 and approximately $427,000 was deposited in 2014. This does not include the deposits made after this period that are discussed further below. 3 These personal accounts use home address, and link to his personal bank and email account information. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 8 Documentl Filed03/25/J/25K PagelO of 95 wire transfers from Mt. Gox to Quantum Fidelity account, and each was just under $100,000. This account was ?mded exclusively with deposits from Mt. Gox. Just two days after receiving his last Mt. Gox wire on May 7, 2013, BRIDGES served in his of?cial capacity as the af?ant on a May 9, 2013 seizure warrant where he seized over $2.1 million from Mt. Gox, under the theory Mt. Gox was operating in violation of 18 U.S.C. Section 1960, which prohibits the operation of an unregistered money service business. After learning of this investigation into the Baltimore Silk Road Task Force and after being interviewed by federal law enforcement in the summer of 2014, BRIDGES transferred via two separate interstate wires over $250,000 from his Quantum Fidelity account into an account at another bank that was held in his own name and in the name of a third-party (with whom BRIDGES has a personal relationship). V. BITCOIN BACKGROUND Bitcoin?4 is a form of decentralized, convertible virtual currency that exists through the use of an online, decentralized ledger system. While Bitcoin mainly exists as an internet?based form of currency, it is possible to ?print out? the necessary information and exchange Bitcoin via physical medium. The currency is not issued by any government, bank, or company, but rather is generated and controlled through computer software operating via a decentralized network. To acquire bitcoins, a typical user will purchase them from a Bitcoin seller or ?exchanger.? It is also possible to ?mine? bitcoin by verifying other users? transactions. Bitcoin is just one form of digital currency, and there are a signi?cant number of other varieties Of digital currency. Bitcoin exchangers typically accept payments of ?at currency (currency which derives its value from government regulation or law), or other convertible virtual currencies in order to obtain bitcoins. When a user wishes to purchase bitcoins from an exchanger, the user will typically send payment in the form of ?at or other convertible virtual currency to an exchanger, usually via wire or ACH, for the corresponding number of bitcoins based on a ?uctuating exchange rate. The exchanger, often for a 4 Since Bitcoin is both a currency and a protocol, capitalization differs. Accepted practice is to use ?Bitcoin? (singular with an upper case letter B) to label the protocol, software, and community, and ?bitcoin? or ?bitcoins? (with a lower case b) to label units of the currency and that practice is adopted here. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 9 Documentl Filed03/25/JF5K Pagell of 95 commission, will then typically attempt to broker the purchase with another user of the exchange that is trying to sell bitcoins, or, in some instances, will act as the seller itself. If the exchanger can place a buyer with a seller, then the transaction can be completed. When a user acquires bitcoins, they are sent to the user?s Bitcoin address. This is somewhat analogous to a bank account number, which is comprised of a case-sensitive string of letters and numbers amounting to a total of 26 to 35 characters. The user can then conduct transactions with other Bitcoin users, by transferring bitcoins to their Bitcoin addresses, via the intemet. Little to no personally identi?able information about the payer or payee is transmitted in a Bitcoin transaction. Bitcoin transactions occur using a public key and a private key. A public key is used to receive bitcoins and a private key is used to allow withdrawals from a Bitcoin address. Only the Bitcoin address of the receiving party and the sender?s private key are needed to complete the transaction, which by themselves rarely re?ect any identifying information. All Bitcoin transactions are recorded on what is known as the block chain. This is essentially a distributed public ledger that keeps track of all Bitcoin transactions, incoming and outgoing, and updates approximately six times per hour. The block chain records every Bitcoin address that has ever received a bitcoin and maintains records of every transaction and all the known balances for each Bitcoin address. Digital currencies, including Bitcoin, have many known legitimate uses. However, much like cash, bitcoins can be used to facilitate illicit transactions and to launder criminal proceeds, given the ease with which they can be used to move money anonymously. As is demonstrated herein, however, in some circumstances bitcoin payments may be traced to accounts at traditional ?nancial institutions using the block chain. VI. SILK ROAD BACKGROUND The Silk Road website was established in early 2011 and operated until on or about October 2, 2013, when it was seized by law enforcement. The illegal nature of the commerce hosted on Silk Road was readily apparent to anyone visiting the site. The vast majority of the goods for sale consisted of illegal drugs of nearly every variety, openly advertised on the site as such and prominently visible on the home page. The only form of payment accepted on Silk Road was Bitcoin. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 10 Documentl Page12 of 95 Silk Road was only accessible through the TOR network, a special network on the intemet designed to conceal the true IP addresses of the computers on the network, and, thereby, the identities of the network?s users. TOR stands for ?The Onion Router.? Every Silk Road user had at least one Bitcoin address associated with the user?s Silk Road account, where deposits to the account could be sent. To make purchases on the site, the user ?rst had to obtain Bitcoin (for example, from an exchanger) and have them sent to the bitcoin deposit address associated with the user?s Silk Road account. After thus funding the account, the user could make purchases from Silk Road vendors. A federal grand jury sitting in the Southern District of New York indicted Ross William Ulbricht, also known as as being the creator of Silk Road and engaging in a drug conspiracy in violation of 21 U.S.C. Section 846, among other charges. The matter proceeded to a multi-week trial in January 2015 before US. District Judge Katherine B. Forrest. Evidence at that trial, and other evidence of which I am aware, establishes that from late 2012 through his arrest on October 1, 2013, Ulbricht (DPR) was residing in and ran the Silk Road from San Francisco. On or about February 4, 2015, a federal jury sitting in the Southern District of New York convicted Ulbn'cht of all counts with which he was charged. Sentencing is set for May 15, 2015. ADDITIONAL PARAGRAPH PROVIDED TO COURT IN SEPARATE UNDER SEAL FILING IS REDACTED HERE. Aside from the New York case, on October 1, 2013, the District of Maryland charged Ulbricht with murder-for-hire and related drug-conspiracy charges.5 It is the District of Maryland?s investigation and case in which FORCE and BRIDGES were involved. VII. FORCE PROBABLE CAUSE Of?cial Undercover Role On Baltimore?s Silk Road Task Force As described above, FORCE, BRIDGES, and other law enforcement agents from the Department of Homeland Security, Internal Revenue Service, and the US. Postal Inspection Service,6 worked on a 5 The District of Maryland had previously charged ?John Doe a/k/a Dread Pirate Roberts? with these charges on or about May 1, 2013, at which time the District of Maryland was unsure of the true identity of DPR. The District of Maryland subsequently charged Ulbricht with these offenses after an IRS Special Agent on the Southern District of New York?s investigation identi?ed DPR as Ulbricht. 6 The Bureau of Alcohol, Tobacco Firearms (ATF) was part of the Baltimore Silk Road Task Force early on, but their involvement did not last long. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT Documentl Page13 of 95 task force out of Baltimore dedicated to identifying and apprehending DPR, later determined to be Ross Ulbricht. As part of his of?cial role in the Baltimore Silk Road investigation, FORCE communicated with DPR using an undercover identity, hereafter referred to as ?Nob.? Nob (FORCE) and DPR communicated throughout 2012 and 2013 using a variety of methods of communication, including on a private messaging system on the Silk Road website and on chat programs that operated over the TOR network. Their communications reveal that DPR believed Nob to be a drug smuggler operating in the United States with connections to criminal organizations throughout the world. In reality, of course, Nob was FORCE, an undercover DEA agent. Many but not all of their communications were as discussed further below. Some portion of the communications between DPR and Nob (FORCE) are memorialized in of?cial case ?le, preserved in what are known as DEA 68, which are of?cial reports of the investigation. Some of the communications are also preserved on of?cial computers. However, not all of the communications between DPR and Nob (FORCE) were memorialized. At the time of Ulbricht?s arrest, law enforcement seized a laptop computer from Ulbricht?s person. This computer has been forensically analyzed. It, too, contained evidence of communications between DPR and Nob (FORCE). It also contained certain communications between DPR and FORCE that FORCE did n_ot memorialize in his of?cial reports or as part of his of?cial case ?le. Ulbricht?s computer also contained a handful of ?les that appear to be Ulbricht?s notes to himself. One such ?le is named counterintel? which your af?ant believes stands for ?Law Enforcement Counterintelligence? and contains information that DPR was receiving from purported ?inside? law enforcement sources. I have reviewed these ?les and believe that they contain information that came from a person or persons inside law enforcement, in part because of their substance and in part because of their use of certain terminology and acronyms that are not widely known by the public. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 12 Documentl FiledOB/ZS/Iix Page14 of 95 Prior to his arrest, DPR was known to have been hiding his true identity and location from law enforcement, so information concerning the government?s investigation was material and valuable to him. I have reviewed many of the communications between DPR and Nob (FORCE) that are available. At some point, Nob (FORCE) and DPR began certain of these communications using what is known as PGP PGP stands for ?pretty good privacy? and is an algorithm that allows its users to send conversations through messaging or chat services. Much like the way bitcoins are controlled, PGP too uses a system of public keys and private keys. With PGP, a public key is used to a message for a speci?c user to read, and a private key is used by the recipient to the message. In addition to needing a private key to a message, a user must also possess a unique password that was established at the time of creation to or sign a message. A review of of?cial case ?le does not contain any of the private PGP keys or passwords needed to communications with DPR. Nor did FORCE provide these private PGP keys to the prosecutor on the Baltimore case or to those in his chain-of-command. Instead, FORCE appears to have been the only individual to have possessed the private PGP keys and passwords needed to unlock his communication with DPR. This is notable, because as a law enforcement agent, I know that one of the chief concerns in working an investigation and building evidence is the ability to obtain decipherable, admissible evidence for use in later proceedings. Despite his involvement in the Baltimore Silk Road investigation, and knowledge that other law enforcement would be unable to read communications without the private PGP keys, FORCE, acting as Nob, speci?cally instructed DPR to use PGP to messages relating to the investigation. While this request may have enhanced Nob?s (F credibility to DPR as a ?criminal,? thereby furthering his cover, it would have made it dif?cult for FORCE to document the communications, communications that would be of use to law enforcement making a case against DPR at a later date. Even if messages to DPR would make Nob more credible, the communications should have been documented, in deciphered form, and memorialized in the case ?le. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT l3 mqamth?oomqamth?o Documentl FiledOB/ZS/g Page15 of 95 I have conferred with other law enforcement agents who conduct online undercover operations and believe the failure to preserve the private PGP keys while simultaneously directing a target to use PGP to messages makes little sense in the context of a law enforcement investigation, particularly taking into account that this task force involved multiple law enforcement of?cers, all of whom might require access to the evidence FORCE gathered in his dealings with DPR: In the event FORCE were to lose the PGP private keys, or that something were to happen to FORCE, any evidence contained in the PGP format would effectively be lost and unusable without the private key. apparent failure to document the private PGP keys for his communications with DPR anywhere in his case ?le, or to provide them to others at the DEA or to the prosecutor, leads me to believe he did not want anyone other than himself (FORCE) to be able to certain of those communications, and that, as a result, he sought deliberately to undermine the integrity of the ongoing Baltimore Silk Road Task Force investigation. Although in the beginning of his time communicating with DPR, FORCE (as Nob) occasionally provided certain communications to others on the Task Force, including the prosecutor with whom he was working, FORCE did not provide all communications in form. This was despite the fact that the prosecutor with whom FORCE was working repeatedly emphasized the need for FORCE to provide all communications. In fact, toward the end of the timeframe in which Nob (FORCE) was in relatively heavy communication with DPR, FORCE increasingly was not providing the versions of their communication. Theft of 525 Bitcoins Coming from Ulbricht, a/k/a In his communications with DPR, Nob (FORCE) created the ?ction that Nob had sensitive information that he would provide to DPR, often in exchange for payment, including law enforcement sensitive information. One of the cover stories that Nob (FORCE) created with DPR was that Nob had access to a corrupt government employee, ?ctionally named ?Kevin.? Ironically, ?Kevin? was supposed to be a corrupt Department of Justice case agent on the govemment?s Silk Road investigation and simultaneously on Nob?s payroll, who would feed Nob information about law enforcement?s AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT l4 Documentl FiledOB/ZS/lg Page16 of 95 investigation into the Silk Road. FORCE memorialized this cover story concerning ?Kevin? in a DEA 6 dated August 1, 2013 (the ?August DEA DPR subsequently paid Nob (FORCE) in bitcoins on at least two occasions. One payment was in June 2013 for 400 bitcoins7 for fraudulent identi?cation documents that Nob was supposed to provide to DPR. A second payment was in August 2013 for 525 bitcoins for ?Kevin?s? inside law enforcement information. At the time of the payments, 400 bitcoins would have been worth approximately $40,000 and 525 bitcoins would have been worth approximately $50,000.8 Both the June 400 bitcoin payment and the August 525 bitcoin) payment became of?cial government property once DPR made the payments: they were received as part of of?cial undercover role from the target of a federal investigation and therefore became undercover proceeds. As is described ?thher below, rather than properly documenting these payments, and safeguarding them in a government account, FORCE took custody of the payments and deposited the bulk of the 400 bitcoin payment and all of the 525 bitcoin payment into his own personal account. Records received from a digital currency exchange, CampBX, reveal that FORCE maintained a personal account there that was linked directly to two additional personal accounts belonging to FORCE: (1) account at another digital currency exchange, Bitstamp, and (2) account at a payments processing account, Dwolla, neither of which were government or of?cial accounts.9 In the August DEA 6, FORCE memorialized the fact that he, acting as Nob, sent a PGP- communication to DPR. According to the August DEA 6, Nob (FORCE) ?advised DPR that 7 The 400 bitcoin payment was actually an 800 bitcoin payment but Nob (FORCE) refunded DPR 400 bitcoins because the deal for the fraudulent identi?cation documents allegedly fell through. 8 These are very conservative estimates and the actual loss amount is likely greater than these amounts: FORCE himself valued the 400 bitcoin payment as being equal to $76,800 on October 22, 2013, and not $40,000 as described here. The reason for the difference concerns the ?uctuating value of bitcoin during this timeframe. The value of bitcoin at the time of the June 2013 payment was approximately $100 per bitcoin, yielding the $40,000 approximation provided here. However, the value at the time of own valuation of the 400 bitcoin payment in October 2013 was approximately $192 per bitcoin. It should also be noted that during the time that FORCE was liquidating bitcoins through his own personal accounts, the value of bitcoin ?uctuated dramatically ranging from less than $300 per bitcoin to over $1100 per bitcoin. 9 FORCE maintained a separate account at Dwolla in the name of his of?cial undercover identity. In contrast, personal account at Dwolla was in his own name and established using his own personal identi?ers such as Social Security number, home address, personal email and date of birth. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 15 quM-PWNHowoo?Qm-waU??O Documentl Filed03/25/J?i Pagel? of 95 ?Kevin? wanted a ?donation? of bitcoins from DPR, the inference being that the information on the Silk Road investigation is valuable.? The August DEA 6 further speci?es that ?Special Agent FORCE provided a Bitcoin wallet address? for DPR to deposit the Bitcoin payment for ?Kevin?s? information. However, FORCE made an ?Agent?s Note? at the bottom of the August DEA 6 explicitly stating that DPR never made the payment, writing NOTE: DPR made no such payment.? (emphasis added). The August DEA 6 is also notable for what information it does not contain. It does not include the actual Bitcoin public address that Nob (FORCE) provided to DPR to receive payment for ?Kevin?s? information. Including this information would have allowed other law enforcement agents to trace any payment if made. Nor does the August DEA 6 list or document the PGP password that would be subsequently needed to decipher the communication between DPR and Nob (FORCE) concerning ?Kevin?s? information or the information surrounding the payment for that information. However, certain communications between Nob (FORCE) and DPR were maintained on the server that hosted the Silk Road website, which the FBI imaged as part of the Southern District of New York investigation. I have obtained and reviewed a copy of that server and it contains the communications between Nob (FORCE) and DPR, including certain communications that FORCE does not appear to have memorialized in the of?cial case ?le. The server contains a chain of messages between DPR and Nob (FORCE) from July 31, 2013 through August 4, 2013. With the exception of one message DPR authored, the messages in the chain are completely That sole message in this chain is from DPR to Nob (FORCE). It is dated August 4, 2013, and concerns a payment DPR made for ?Kevin?s? information. Speci?cally, DPR wrote: could not your second message, got an error. I could the ?rst, and have sent the 525 as reguested. Please keep me posted and you have my word that no one else knows anything about this. I?m sorry I didn?t know how much to send before. I was afraid of offending if I sent too little and looking foolish if I sent too much. I hope I didn?t make things too dif?cult for you.? (emphasis added). Within approximately two hours of DPR sending the message described above, Nob (FORCE) AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT l6 Documentl Page18 of 95 responded to DPR with an message but containing the subject line, ?use As noted, PGP stands for ?Pretty Good Privacy,? an mechanism. In other words, FORCE was directing DPR to his messages. Following the message containing the subject line were a series of additional back and forth PGP messages between Nob (FORCE) and DPR. I know from other law enforcement agents who conduct undercover operations on TOR and black market sites that there is little reason to direct a target who is using clear communication to instead use communication, and no reason to fail to document a mechanism in the case ?le or share it with other agents, management, or the prosecutor. Again, FORCE did not memorialize the PGP private key that could be used to decipher the July 31-August 4, 2013, communication chain between himself and DPR anywhere in his case ?le or provide it to anyone else at the DEA or to the prosecutor with whom he was working. Furthermore, the last mention of payment for ?Kevin?s? information in of?cial DEA case ?le is the August DEA 6, in which FORCE speci?cally stated that no payment was ever received. Nor are there any subsequent DEA 6s correcting or amending this. In fact, a review of of?cial case ?le reveals that FORCE never documented having received a 525 Bitcoin payment from DPR, as August 4, 2013, communication to Nob (FORCE) states had occurred. I believe that FORCE, acting as Nob, instructed DPR to use PGP in part to conceal the fact that DPR actually had made a 525 bitcoin payment to Nob (FORCE) that FORCE was not detailing in his of?cial law enforcement reports. This conclusion is bolstered by the fact that in the August DEA 6 FORCE took care to explicitly note the fact in the NOTE: DPR made no such payment,? and there is no subsequent DEA 6 in which FORCE states that DPR did transmit a 525 bitcoin payment. It is further bolstered by the fact that FORCE does not appear to have memorialized the PGP keys for his communications with DPR anywhere in the of?cial case ?le. Finally, when DPR mentioned the 525 bitcoin payment in the August 4 communication, the ?rst response FORCE acting as Nob gave was ?use Notably, by late July 2013, the Baltimore Silk Road Task Force had been made aware that the FBI was seeking to obtain an image of the Silk Road server, and therefore FORCE may have had reason AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT l7 Case3:15-mj-70310-MAG Documentl FiledOB/ZS/J/ai Page19 of 95 to fear that any communications between himself and DPR would be accessible to the FBI in the event the FBI was successful in imaging the server. Records obtained from personal digital currency account at a digital currency exchange company, CampBX, reveal that on September 27, 2013, FORCE deposited the precise amount of 525 bitcoins into his own personal account at CaanBX.lo I have performed an analysis of the block chain as it concerns the 525 bitcoin deposit to personal CaranX account. The analysis reveals that the 525 bitcoins FORCE received into his own personal Carnpr account was directly linked, through a series of transactions, to the 525 bitcoin payment that DPR made on August 4, 2013, i.e. the same day DPR communicated to Nob (FORCE) that he had ?sent the 525 BTC as requested.? Records from the Silk Road servers establish that this 525 bitcoin payment originated from Silk Road account on August 4, 2013. Speci?cally, the 525 bitcoin payment was split into four smaller payments and made in the following manner: . a. On August 4, 2013 at 22:05 UTC a payment of 203 bitcoins b. On August 4, 2013 at 22:05 UTC a payment of 134 bitcoins c. On August 4, 2013 at 22:05 UTC a payment of 61 bitcoins d. On August 4, 2013 at 22:01 UTC a payment of 127 bitcoins The 525 bitcoin payment went from four addresses and ultimately landed in a single pass- through account on September 1, 2013. The 525 bitcoin remained in the pass-through account from September 1, 2013 until September 27, 2013, when they were transferred into personal account at CampBX. These transactions are depicted on ?Trace of 525 Bitcoin Payment,? attached as Exhibit B. Notably, FORCE treated June 400 bitcoin payment differently from the way he treated the August 525 bitcoin payment. To be sure, FORCE wrong?Jlly deposited substantial portions of both '0 The September 27, 2013 date has signi?cance because email records I have reviewed indicate that, at the latest on September 27, 2013, FORCE learned that DPR was about to be apprehended as part of the separate New York investigation into the Silk Road. In response to learning this information, FORCE wrote to the prosecutor with whom he was working inquiring as to the true name and identifying information of DPR. To my knowledge, FORCE was not provided with that information on September 27, 2013 in response to his inquiry. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT l8 Documentl Page20 of 95 payments into his own personal account at CampBX, and later transferred them to another of his personal accounts at Bitstamp, another digital currency exchange where FORCE maintained a personal account. However, FORCE memorialized the 400 bitcoin payment in a DEA 6 (albeit many months after the June 400 bitcoin payment was made) and in January 2014 attempted to put together a seizure warrant for that 400 bitcoin paymentthis for the 525 bitcoin payment. And as part of the process of putting together a seizure warrant for the 400 bitcoin payment, the federal prosecutor with whom FORCE was working emailed FORCE on January 16, 2014, and asked him a series of questions, including where the 400 bitcoins physically were. FORCE replied in an email later that day that the 400 bitcoins were ?at the Based on my review of records and an analysis of the block chain, this was not true. And, with respect to the 525 bitcoins, FORCE never made any attempt to memorialize the payment or to prepare a seizure warrant. The federal prosecutor with whom FORCE was working was unaware of any 525 bitcoin payment ever having been made, as were superiors at the DEA. As part of this investigation, a federal search warrant was issued to search various personal email facilities belonging to FORCE. One such email account contained what appears to be a note to himself saved in a drafts folder. This note references two transfers of bitcoin payments from DPR, one made in ?June/July 2013 for the fraudulent UK identi?cation? and one made on August 4, 2013, the same date that DPR transferred 525 bitcoins to Nob (FORCE). Exhibit attached (?Dra? Note?). In other words, own saved email note indicates there was a payment from DPR on August 4, 2013.?l The note also appears to attempt to justify conduct, noting that the government actually made money during the time FORCE retained the payments (presumably given the ?uctuating value of Bitcoin). At the time of the 525 bitcoin payment and during the time of the communications between Nob (FORCE) and DPR, I have con?rmed via internet service provider records and a variety of other means that DPR (Ross Ulbricht) was physically located in San Francisco, in the Northern District of California. '1 For reasons that are currently unknown to me, FORCE characterized the August 4, 2013 payment as being for 200 bitcoins. However, as demonstrated above, the August 4, 2013 payment was or 525 bitcoins. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT l9 Documentl Page21 of 95 Based on the fact that DPR paid 525 bitcoins to Nob (FORCE) in of?cial government capacity as an undercover agent on Baltimore?s Silk Road case, and based on the fact that the 525 bitcoins ultimately ended up in personal account with CampBX, there is probable cause to believe that FORCE embezzled, converted, or stole government property in violation of 18 U.S.C. Section 641. Given that these bitcoins went through several different accounts, o?en for short periods of time, as depicted in Exhibit B, and sat idle in a pass-through account from September 1, 2013 through September 27, 2013, before making their way to personal account with Campr on September 27, 2013, there is also probable cause to believe that FORCE was attempting to conceal the source of the true source of the proceeds, in violation of 18 U.S.C. Section 1956. Fraud as ?French Maid? The only of?cially-sanctioned undercover identity for FORCE to communicate with DPR was as Nob. Nob was the persona that was discussed in of?cial reports. ?Nob? was also the persona of which others in chain-of-command and the federal prosecutor on the Baltimore Silk Road case were aware. When DPR was arrested in San Francisco, he was caught literally in the act of running the Silk Road on a laptop computer. The FBI seized and forensically examined that laptop and its contents were part of the govemment?s proof at trial against Ulbricht. As discussed above, Ulbricht?s laptop contained a text document entitled counterintel,? a record of sorts that he maintained about information he was receiving from apparent law enforcement ?insiders? purporting to have knowledge about the government?s investigation into the Silk Road. The ?le appears to contain cut and pasted sections of what the insiders were relaying to him through online chats or private messages. One such insider used the moniker ?French Maid.? Notes in a ?le from Ulbricht?s computer indicate that he paid ?French Maid? approximately $100,000 worth of bitcoin in exchange for a name that he was told Mark Karpeles had provided to law enforcement. Mark Karpeles was at the time the CEO of the now-defunct Mt. Gox digital currency exchange. The Baltimore Silk Road Task Force was attempting to arrange an interview of Karpeles during the July to August 2013 timeframe, in order to obtain any information Karpeles might have had concerning the operator of Silk Road. AFFIDAVIT TN SUPPORT OF CRIMINAL COMPLAINT 20 Documentl Page22 of 95 Speci?cally, in a text document recovered from Ulbricht?s computer titled ?log,? there is an entry dated September 13, 2013, in which Ulbricht wrote: ?French Maid claims that mark karpeles has given my name to DHLS [sic]. I offered him for the name.? Days later,I2 Ulbricht wrote paid French Maid for the name given to DHLS by karpeles.? Our investigation has revealed that there is probable cause to believe that FORCE was ?French Maid,? a source that Ulbricht paid for inside information. I have reviewed private messages between ?French Maid? (FORCE) and DPR obtained from the Silk Road server imaged by the FBI. The messages span from August 26, 2013 through September 14, 2013. The bulk of the messages are with PGP keys, but some early messages are not In the ?rst message in this thread, dated August 26, 2013, ?French Maid? wrote to DPR: have received important information that you need to know asap. Please provide me with your public key for PGP. (Emphasis added). Just four hours later, ?French Maid? sent a follow-up message to DPR with the subject line ?Whoops!? and a message stating am sorry about that. My name is Carla Sophia and I have many boy?'iends and girl?'iends on the market place. DPR will want to hear what I have to say xoxoxo.? (Emphasis added). What follow are a series of back and forth messages between DPR and ?French Maid.? Of particular note, there are several messages between DPR and ?French Maid? on September 13, 2013, with ?French Maid? including the subject line ?Hope you like.? It is unclear whether ?French Maid? ever provided DPR with any name. In the ?log? ?le recovered from Ulbricht?s computer, after the entry stating that he had ?paid French maid $100k for the name given to DHLS by karpeles,? there is an entry stating: ?He hasn?t replied for 4 days.? There is no further entry in the ?log? ?le regarding ?French Maid.? The fact that the Baltimore Silk Road Task Force was attempting to arrange an interview with Karpeles was not widely known in law enforcement circles. In other words, ?French Maid? could not have been just anyone out of the universe of law enforcement. It had to have been someone who knew '2 The entry gives only the date range of ?September 11-September 18? and does not provide an exact date. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 21 Documentl Page23 of 95 about Baltimore?s attempt to arrange an interview with Karpeles.l3 Based on emails I have reviewed, FORCE was one of a small group of individuals that knew of those discussions. Additional pieces of circumstantial evidence prove that FORCE is ?French Maid.? Both ?French Maid? and FORCE (operating as ?Nob?) used the exact same brand of PGP software, a free brand called There are different brands of PGP software so it is noteworthy that both FORCE (operating as ?Nob?) and ?French Maid? used the same brand. Not only did FORCE and ?French Maid? both use the same brand of PGP software, they also both used the same outdated version of that software, 1.4.12. Version 1.4.12 was released on January 2012, and was replaced with a new version by December 2012, and was one of several versions of software.? As such, both ?French Maid? and FORCE (as Nob) were using a speci?c, older version of the software, and neither of them replaced it with the other (free) versions of that came out thereafter. I know based on conversations with another federal agent who is involved in undercover investigations that among TOR users and consumers of PGP software, vl.4.12 version was somewhat outdated by late August 2013 when ?French Maid? appeared in communication with DPR for the ?rst time. This is not akin, for example, to two people using the same model of mobile phone but both having software that is out of date. Rather, the outdated version that both ?French Maid? and FORCE (as Nob) used is more of a ?signature? given the greater number of versions available. There are also additional similarities between (Nob?s) and ?French Maid?s? PGP patterns. Both ?Nob? and ?French Maid? left certain default settings on their PGP software. For one thing, both ?French Maid? and FORCE (Nob) left a ?tag? that appeared on every message authored from their PGP key revealing the brand and version of PGP software they were using. This is akin to, for example, leaving the phrase ?sent from my iPhone? on the bottom of one?s emails but with greater detail: it would be akin to leaving a phrase like ?sent from my iPhone 6 103 Leaving this ?tag? on typically reveals that one is dealing with a fairly inexperienced user of PGP, because someone that regularly uses PGP to communicate would normally have changed their settings to omit this tag. After 13 My understanding is that that the interview with Karpeles never materialized. l4 investigation into Silk Road began in approximately February 2012 and he began using PGP as ?Nob? sometime by approximately April 2012. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 22 Documentl Page24 of 95 all, the entire point behind PGP software is anonymity, so if a user leaves the brand, version, bit, and release date of software on a message this is revealing something about the sender and undermines the goal of remaining 100% anonymous. One of the ?rst things many PGP forums or regular users of PGP software instruct is that a user disable this feature. Moreover, PGP offers choices of 1024, 2048, 3072 or 4096 bit keys, with the higher keys giving greater protection. Many of the regular PGP users that were active on the Silk Road chose the 4096 bit keys because of the additional protection the larger key provided. Here both FORCE (as Nob) and ?French Maid? used the 2048 bit default key. In addition to the PGP similarities, additional evidence that FORCE is ?French Maid? is that the 770 bitcoin payment DPR made to ?French Maid,? worth approximately $98,000 at the time, ended up in own personal digital currency account at CampBX. Speci?cally, Silk Road server data reveals that DPR made a payment on September 15, 2013, for 770 bitcoins. As noted, this is the same time frame when Ulbricht wrote in his journal that he had ?paid French Maid for the name that [K]arpeles provided to An analysis of the block chain reveals that the 770 bitcoin payment was broken up into four separate bitcoin addresses and funneled through a series of pass-through accounts in September2013. Between September 23, 2013 and September 29, 2013, those four addresses all came together to deposit 770 bitcoins in personal account at CampBX. For a detailed analysis of these complex transactions, see attached Exhibit (?Trace and Analysis of DPR September 2013 Payment to French Maid?). Records obtained from Campr demonstrate that this was an account held in personal capacity. Moreover, throughout November 2013, a substantial portion (at least 600 bitcoins) of the bitcoins in CampBX account moved to personal account at Bitstamp, a global digital currency exchange. Again here, records obtained from Bitstamp demonstrate that FORCE used his personal identi?ers, home address, date of birth, personal bank account, and personal email address in connection with his Bitstamp account. As is discussed ?irther below, FORCE subsequently liquidated hundreds of thousands of dollars worth of bitcoin ?'om this Bitstamp account by having the proceeds wired into his personal checking account. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 23 Documentl Page25 of 95 From having reviewed the entries from the ?log? ?le on Ulbricht?s computer and the portion of the ?French Maid? and DPR messages, I believe that statement to DPR that he was ?Carla Sophia,? a user on the ?market place? with ?many girlfriends and boyfriends,? and omission of his true identity, was a material misrepresentation. I believe this information in?uenced or was capable of in?uencing DPR whether to part with property, in this case 770 bitcoins, had DPR known that he was not communicating with a female named ?Carla Sophia? but instead a male named Carl FORCE who was in fact a federal agent. When DPR made the 770 bitcoin payment and when the communications between ?French Maid? (FORCE) and DPR occurred, I have con?rmed via intemet service provider records and a variety of other means that DPR (Ulbricht) was physically located in San Francisco, in the Northern District of California. Based on the fact FORCE fraudulently told DPR via the use of interstate wires that he was ?Carla Sophia,? and that this fact was material, and given that on that basis DPR paid 770 bitcoins to ?French Maid? for information, and that personal accounts received 770 bitcoins from DPR during the same September 2013 timeframe, there is probable cause to believe that FORCE committed wire fraud in violation of 18 U.S.C. Section 1343. Given that, for example 194 bitcoins of this 770 payment went through several different accounts, as depicted in Exhibit E, from September 15, 2013 through September 22, 2013, before making its way to personal account with CampBX on September 23, 2013, there is also probable cause to believe that FORCE was attempting to conceal the true source of the proceeds, in violation of 18 U.S.C. Section 1956. Extortion of DPR As ?Death From Above? From reviewing one of of?cial reports dated November 12, 2012, I know that around that time FORCE obtained information from Homeland Security Investigations (HSI) about an individual then being considered as a possible suspect for DPR. The individual was named [actual name omitted here for, con?dentiality.] Due to its law-enforcement sensitive nature, FORCE was not permitted to share this information with individuals outside the government. On or about April 1, 2013, FORCE created a ?ctitious persona on the Silk Road website named ?Death from Above.? FORCE, using the ?Death from Above,? moniker, solicited a $250,000 payment from DPR and provided DPR the AA name and personal identifying details. Speci?cally, on April 1, AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 24 Documentl Filed03/25/1fg Page26 of 95 2013, ?Death from Above? wrote DPR a message on the Silk Road server stating, know that you had something to do with disappearance and death. Just wanted to let you know that I?m coming for you. Tuque. You are a dead man. Don?t think you can elude me. De Oppresso Liber.?ls On April 6, 2013, DPR replied: don?t know who you are or what your problem is but let me tell you one thing: I?ve been busting my ass every god damn day for over two years to make this place what it is. I keep my head down, I don?t get involved with the drama . . . somehow people still turn up at my doorstep . . . I?ve been hacked, I?ve had threats made against the site and now, thanks to you, I?ve had threats made against my life. I know I am doing a good thing running this site. Your threats and all of the other aren?t going to deter me . . . stop messaging me and go ?nd something else to do.? Later that day ?Death From Above? (FORCE) replied to DPR, this time dropping a reference to name, stating ?It?s not that easy I?m legit. Green Beret. Friend of I have access to ?les that FBI, DEA, AFP, SOCA would kill for. In fact, that is what I do . . . kill. The only thing that I do . . . Don?t worry has no interest in you and your little website. North KOrea and Iran are a lot more important. In fact, as far as the Army and Navy are concerned you are a nobody. Petty drug dealer. But, was somebody. So tell me where he is and we will be done with this.? On April 10, 2013, ?Death from Above? (FORCE) wrote to DPR again, this time giving DPR details concerning AA including full name, date of birth, citizenship, address, and other personal identifying details. DPR stated, ?Is that enough to get your attention? After watching you, there is no way you could have killed But I think you had something to do with it. So, $250,000 in US. cash/bank transfer and I won?t give your identity to law enforcement. Consider it punitive damages. Death From Above.? This payment appears to have never materialized, apparently because DPR did not believe ?Death From Above?s? information: in April 2013 Ulbricht wrote in the ?log? ?le found on his laptop '5 The entire series of messages that ?Death From Above? sent to DPR is not included here for brevity. The reference to C.G. actual name omitted here for con?dentiality] was a reference to an employee of DPR whom DPR had sought to have murdered in January 2013, as explained ?thher below. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 25 .Documentl Filed03/25/1/g Page27 of 95 that he was ?being blackmailed again. Someone says they have my ID, but hasn?t proven it.? Then, on April 11, 2013, Ulbricht wrote ?guy blackmailing me who says he has my ID is bogus.? There appears to be no mention of ?Death From Above? anywhere in of?cial DEA 6 reports. However, case ?le contains several DVDs of video taken with of?cial DEA laptop with a screen-recording program that shows certain communications with DPR. At some point in that several hours? worth of video footage there is a clip of a message being typed on the Silk Road using the ?Death From Above? account. A screenshot from that video is attached as Exhibit A. Therefore, I believe FORCE was ?Death From Above.? Death From Above was not known to superiors at the DEA, or the prosecutor assigned to the investigation, and FORCE was not authorized to disclose information concerning persons under investigation to anyone outside the investigative team, including, of course, disclosing information to the target himself as part of an unsanctioned extortion effort. acting as ?Death From Above? demonstrates that FORCE had a history of: (1) creating ?ctitious personas that he did not memorialize in his of?cial reports or apprise his superiors at the DEA or the prosecutor of; (2) soliciting payments from and (3) providing law-enforcement sensitive information to outside individuals when the disclosure of such information was not authorized and not memorialized in any of?cial report. Con?ict of Interest with is a California-based digital currency exchange company that supports trading between Bitcoin and other I have reviewed a number of emails between FORCE and personnel, including its CEO and Co-Founder. These communications demonstrate that FORCE had a two-fold relationship with he was both a major investor as well as its de facto compliance of?cer all while he was employed as a full-time DEA agent who was investigating digital currency users and providers. According to the emails, in November 2013 FORCE invested approximately $110,000 worth of bitcoin in in two installments. First, on or about November 8, 2013, FORCE invested approximately $10,000 worth of bitcoin in Second, on or about November 25, 2013, FORCE invested approximately $100,000 more worth of bitcoin in According to AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 26 Documentl Page28 of 95 the amount ?of investment made him one of the top four investors in its ?rst seed round of fundraising. In addition to his investor status, FORCE was engaged in negotiations with to become its Chief Compliance Of?cer. Early on in their communications, CoinMKT?s CEO ?agged the possibility of a con?ict with FORCE simultaneously being a DEA agent and serving as CoinMKT?s compliance of?cer, noting in a November 1, 2013 email, ?Just FYI if there?s a work con?ict - I?m not interested in doing anything illegal, so if we have to wait until you?re not of?cially an employee [with or whatever, then let me know, you?re the best judge of that. . . On November 16, 2013, CoinMKT?s CEO wrote to FORCE asking a few questions. For example: Where would you work? Would you retain your old job? FORCE: I would work here in Baltimore. I?m not sure how much longer I will be staying here at DEA. What connections can you bring to the table to help us with compliance? FORCE: I have numerous contacts with IRS-Criminal Investigations, and my Intel Analyst (among others have direct access to [Financial Crimes Enforcement Network]) . . . plus I can run queries in criminal databases [database name omitted] for suspect members of I know from my training and experience as a law enforcement of?cer that running checks in government databases such as the one FORCE referred to by name in the email above is strictly forbidden if not for an of?cial law enforcement purpose. In fact, misuse of a government database may violate federal law and expose the offender to potential criminal liability. Nor does it appear that FORCE was speaking in the future tense about what he could do for down the road in the event he left the DEA and had full-time employment with because his offer to run checks in criminal databases such as the one he mentioned by name would have been contingent upon his remaining an agent in order to have access to such databases. Moreover, FORCE explicitly indicated that he would remain at DEA and simultaneously perform compliance work for In a November 23, 2013, email FORCE stated ?you know for right now, I think it would be better if you just pay me in stock options. I will stay on with DEA until AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 27 Documentl Page29 of 95 hits it ?big time? I have a lot of down time at DEA so I am con?dent that I can handle all that needs to be done regarding Legal and Compliance on a daily basis.? has advised that it needed a bank account in order to be successful in the digital currency ?eld. On November 25, 2013, CoinMKT?s CEO wrote to FORCE stating that a primary anti- money laundering (AML) contact was needed and asking if could list FORCE as its AML point of contact. Subsequently, on January 13, 2014, advised FORCE it was listing FORCE as its Compliance Of?cer for purposes of contact with a bank. FORCE responded the next day, ?All right. . .let?s hope this goes.? Again, this was while FORCE was still employed as a DEA agent. During the latter part of 2013, FORCE and continued to discuss role as a Compliance Of?cer. By January 2014, email correspondence indicates that thought of and included FORCE as part of its core team, including him on internal emails. For example, in a January 20, 2014, email CoinMKT?s CEO sent to about 11 employees describing each employee?s job description, FORCE was listed as the third person after the two founders as ?compliance extraordinaire.? Although authored this email, other communications demonstrate that FORCE thought of himself as one of the team and encouraged to use his status, his name, bio, and photo in their company materials. For example, on February 19, 2014, FORCE provided a headshot and bio to include in pitch decks for investors.'6 And on January 25, 2014, FORCE wrote inquiring if was registered with appropriate authorities and offering guidance about money transmission laws. In his email inquiry, FORCE used phrasing that suggested he was part of the company: ?this will keep is from having the Feds seize any monies from us under 18 U.S.C. Section 1960 . . . . eventually when hit the big time, )v_e are going to have to get a license from each state that we have customers (emphasis added). has provided numerous emails between and personal email account. A search warrant was also obtained and served on Microsoft (which hosts Outlook email) for personal emails. Some of the emails between FORCE and were included in the Microsoft production. However, several other of the emails that provided were not included '6 has con?rmed that they used bio and pro?le, and solicited venture ?mdraising in the San Francisco Bay Area, within the Northern District of California. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 28 WQONM-PWNHOCOOQONM-PWNHO Documentl FiledOB/ZS/yi? Page30 of 95 in the production that Microsoft made, including many of the emails excerpted above. The FBI. has conferred with Microsoft about this issue, and was advised that all emails from personal email were provided and that any emails that were missing likely meant that the user had deleted those emails. In other words, it appears to me that FORCE may have selectively deleted certain inculpatory emails between himself and Unlawful Seizure of Funds R.P. was a California resident who held an account at during at least 2013 and 2014. RR maintained cash in his account with as well as various brands of digital currency to include bitcoin, litecoin, feathercoin, and worldcoin. On February 5, 2014, emailed FORCE regarding what it initially believed to be suspicious activity by R.P, noting that R.P. had withdrawn ?$10,000 three times instead of once for $30,000.? sought direction from FORCE on how to proceed, noting R.P. had approximately 128 bitcoin (approximately $109,000 at the time) in his account with On February 8, 2014, FORCE emailed directing them to suspend account and to ?tell that the federal government is investigating him for federal violations of 18 USC 1956 (money laundering) and 18 USC 1960 (unlicensed money transmitter) and 31 USC 5324 (structuring). . will seize the 128 federally and do all the paperwork. On or about February 7, 2014, FORCE instructed a DEA intelligence analyst to run a criminal history check on noting that the purpose was to uncover illegal activity on R.P. According to a subsequent report FORCE authored, the only information found on R.P. was that he had previously withdrawn $17,000, had a felony conviction for vandalism, and was a self-employed actor. Nonetheless, on February 8, 2014, at direction, froze account. On February 10, 2014, FORCE, now using his of?cial DOJ account instead of the personal email account he had historically used to communicate with served an administrative subpoena on requesting that they provide all information regarding R.P. FORCE also sent the subpoena to by facsimile later that day. CoinMKT?s facsimile services are hosted by ?Hello Fax,? a company based in San Francisco within the Northern District of California. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 29 Documentl FiledOB/ZS/g Page31 of 95 On February 11, 2014, CoinMKT?s CEO emailed FORCE to relay that ?some feedback from other users . . . may throw off our thesis about this user?s activity. Let?s talk when you can, I?m glad I caught this.? CoinMKT?s CEO has explained that he learned that a glitch in CoinMKT?s system was not permitting users to withdraw more than $10,000 worth of currency at a time, thereby diminishing the earlier suspicion that R.P. was structuring transactions or doing anything criminal. FORCE replied to this email, inquiring whether had frozen account and seeking information concerning digital currency balances, noting that R.P. may have a mental condition. On March 1, 2014, RR wrote to advising that he had not been able to log in to his account. replied to RP. that his account had been ?suspended due to suspicious activity. Under government subpoena, we have been instructed to forward your communication to authorities. We have cc?d Mr. Carl FORCE who will be your point of contact, please send further communication to him to resolve this issue.? A Report of Investigation FORCE authored states that on February 26, 2014 and March 6, 2014, FORCE attempted to contact R.P. stating have attempted to contact you numerous times via telephone and emails, yet have received no response. I am trying to ascertain if your suspicious ?nancial transactions at have a legitimate explanation. The facts show that you are structuring deposits and withdrawals. In addition, virtual currencies have been linked to illicit activities such as illegal narcotics transactions, money laundering, child pornography, etc. As such, I am starting the legal process to seize your Real Money Balances at A negative response to this email will be evidence that you are abandoning your assets at Over the coming weeks, FORCE directed to seize account. has expressed it was hesitant to do so, but did not want to draw the ire of federal law enforcement, especially given that the digital currency ?eld was already subject to fairly intense law enforcement scrutiny. also felt it prudent to defer to the direction of a federal law enforcement agent, and trusted that if FORCE was telling that R.P. was using their company as a platform for illegal activities, it was not in a position to second guess that conclusion. Nonetheless, requested something in writing from FORCE before seizing account. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 30 Documentl Filed03/25/J/,5\ Page32 of 95 During this March 2014 timeframe, account with contained two forms of currency. First, it contained approximately $37,000 in cash. Second, it contained approximately $297,000 in four forms of different digital currencies (bitcoin, litecoin, feathercoin, and worldcoin). FORCE instructed to seize balances. effectuated this seizure by creating an entirely new account with the name ?R_seized.? On March 12, 2014, emailed FORCE, carbon copying others at the DEA, stating that it had created the ?R_seized? account, providing the login and password information and asking FORCE to ?please advise when you would like us to move the ?mds? from the RP. account into the R_seized account. Later that same day FORCE replied to including none of the other recipients on the original message in his reply, ?Transfer them now please.? On March 23, 2014, using his of?cial DEA email account with no one carbon copied, FORCE emailed noting that ?we checked the balances this morning [in the R_seized account] and the coins are still not there. Is everything okay?? replied later that same day that they had experienced some logistical issues in effectuating the transfer of digital currency from account to the R_seized account. On March 26, 2014, emailed FORCE stating ?the ?mds should be in your account. We made the move 2 days ago but please con?rm on your end that you have received them.? FORCE replied, from his of?cial DEA email account with no one carbon copied, ?Yes they are in account now. Thank you very much!? I have con?rmed that no such digital currency funds were received in any of?cial DEA account, but instead went into own personal account with Bitstarnp, as described further below. On April 3, 2014, FORCE emailed from his of?cial DEA account, this time carbon copying three other DEA employees including his supervisor, directing to ?please convert the $37,051.08 that has been seized from RR into a certi?ed check and forward it to DEA please make the certi?ed check payable to the US. Marshals Service.? did so and sent the government a certi?ed check for $37,051.08, representing that portion of account that had been in cash. In a Report of Investigation dated March 11, 2014, FORCE wrote that ?on March 13, 2014, DEA seized the following: 179.7977 bitcoin; 3,417.565 Litecoin; 366,511.2876 feathercoin; and AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 31 Documentl Filed03/25/J?g Page33 of 95 621,439,7182 worldcoin from for violations of the Bank Secrecy Act statutes, more Speci?cally structuring ?nancial transactions and money laundering. was exploiting to launder his illicit proceeds.? FORCE did not attempt to translate these various digital currency balances to any approximate dollar values as he had done in other instances. In a Report of Investigation dated April 3, 2014, FORCE made reference to the earlier March 11 Report of Investigation and noted that ?on April 4, 2014, DEA seized $37,206.30 from . . FORCE directed to forward a certi?ed check for $37,206.30 to the U.S. Marshal?s Service.? A Stande Seizure Form (SSF) is a government form that is typically completed by the DEA when funds are seized. FORCE prepared two SSFs relative to RP: (1) an SSF dated April 3, 2014, for the approximately $37,000 in cash that was seized from account; and (2) an SSF dated March 12, 2014, for the approximately $297,000 worth of digital currency that was seized from account. However, FORCE instructed the DEA Asset Forfeiture Specialist not to input the digital currency SSF into the govemment?s computer tracking system for seized funds, the Consolidated Asset Tracking System (CATS), but rather to ?hold? it for ?a few months? or until further notice. The DEA Asset Forfeiture Specialist made a handwritten note on the digital currency SSF noting that FORCE had expressly directed it not be input at that time. FORCE included a copy of the SSF relating to the cash in the of?cial case ?le of the Silk Road investigation.l7 However, he did not include a copy of the SSF relating to the digital currency in that same case ?le. It appears that FORCE ?papered up? the seizure of the digital currency portion of account in such a way that he may have thought he would be covered in the event anyone ever asked any questions about it being documented, but at the same time in a way that made it appear as if the approximately $37,000 in cash was the sum total of all that was seized from RR Telling in this regard is that (1) when FORCE emailed from his of?cial DEA account about the approximately $37,000 in cash he carbon copied numerous individuals; the same was not true when he emailed about the approximately $297,000 worth of digital currency; (2) co-case agent has advised that she was '7 My investigation con?rmed with then-supervisor that the RP. ?case? had no known connection to the Silk Road. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 32 Documentl FiledOB/ZS/g Page34 of 95 of the belief that only approximately $37,000 total was seized from account, and was unaware of the remaining approximately $297,000 in digital currency that had been seized from account; (3) FORCE completed SSFs for both the cash and digital currency seizures but did not include the SSF for the digital currency in the case ?le; and (4) FORCE directed that the digital currency SSF be held. In sum, I believe the way in which FORCE documented the RP. seizure was attempt to give himself plausible deniability by memorializing the digital currency seizure in both a Report of Investigation and SSF, albeit in a fashion that did not draw attention to the fact that it was worth approximately $297,000. The documentation is particularly oblique for someone unfamiliar with digital currency, as many in chain of command were. The approximately $297,000 worth of digital currency funds" from account did not make it to any of?cial DEA or govemment account. Instead, that amount ultimately went into personal Bitstamp account and was subsequently liquidated into US. dollars into personal checking account. Speci?cally, on April 14, 2014, the funds moved from the R_Seized account that had set up into a pass-through account. Then, on April 16, 2014, those funds moved from the pass-through account to personal Bitstamp account. In late April 2014, FORCE made a withdrawal request of approximately $201,000 from his Bitstamp account to his personal checking account. I have also con?rmed with DEA that no case was ever opened against R.P. I am aware of no legal basis on which FORCE seized balances. Within days of the seizure of the approximately $297,000 in digital currency ?mds from RR, FORCE launched his own personal limited liability company dedicated to the investment in and speculation of digital currency, Engedi, LLC. Use of Of?cial Subpoena for His Own Financial Gain Venmo is a payments 'platform company that enables person-to-person and merchant payment transactions using an application on mobile phones or other intemet connected devices. Venmo is a subsidiary of PayPal, based in San Jose, California, and as discussed, relevant personnel from Venmo?s compliance division are based in San Francisco, California, both within the Northern District of '8 The precise deposit amount was 222.9989 bitcoins. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 33 Documentl Filed03/25/Jfg Page35 of 95 California. On or about February 12, 2012, FORCE opened a Venmo account with the user name ?cforce.? That same day, a user by the name of also opened a Venmo account. Also on or about February 12, 2014, initiated a payment to FORCE using Venmo?s platform. The note on the transaction to FORCE stated: ?Reversing payment #7163719 for $2500.00 from user to user better bitcoin.? Venmo?s fraud controls identi?ed high risk payment activity and blocked both and accounts. On February 13, 2014, FORCE contacted Venmo by email from one of his personal email addresses to request, among other things, that his account with Venmo be unlocked so he could withdraw $2,500. FORCE informed Venmo that R.R. was the target of a federal undercover investigation for which FORCE was the assigned case agent and the payment was for an undercover Bitcoin transaction. FORCE attached a copy of his badge and credentials in this email, and also mentioned in a post?script that he was interested in partnering with Venmo for employment opportunities. On or about February 17, 2014, with his account at Venmo still blocked, FORCE served an administrative subpoena on Venmo from his of?cial DOJ email account, Carl.M.Force@usdoj.gov, with a carbon copy to one of his personal email addresses. In this email, FORCE stated: ?Please comply to the attached subpoena! If you should have any questions, please call me at The attached subpoena commanded the production of documents related to RR. and directing Venmo?s administrator to ?lift the ?freeze? on the account of Carl Force, effective immediately.? The subpoena itself contained a speci?c case matter number and grand jury number. FORCE sent this subpoena to Venmo?s law enforcement contact within its compliance division, who was based in San Francisco, within the Northern District of California. Given Venmo?s belief that request to unfreeze a personal account was not a proper use of an of?cial government administrative subpoena, and given repeated contact with Venmo from his personal email address, Venmo did not lift the freeze on account and instead noti?ed superiors in the DEA. On February 24, 2014, FORCE emailed Venmo?s compliance team in San Francisco and instructed them to disregard the subpoena. AFFIDAVIT IN SUPPORT or CRIMINAL COMPLAINT 34 ALAN Documentl Page36 of 95 On March 4, 2014, FORCE asked one of his co-case agents on the Baltimore Silk Road Task Force to run a query in a law enforcement database for Venmo, stating that he wanted to collaborate ?on a suspicious money remitter, Venmo, Inc. Venmo has since registered with but I want to know if they have state money license remitting licenses in California and New York. Can you check? If not, I want to seize their bank accounts (need to identify them) a la BRIDGES and seizure warrants for Mt. Gox.? In other words, FORCE appears to have been targeting Venmo for seizure after the company rebuffed his attempts to use a subpoena for his own personal matter. On March 13, 2014, FORCE again used his personal email account to email Venmo?s support division. In that email, FORCE advised Venmo that if they refused to unfreeze his account, he would retain an attorney and ?le a civil lawsuit. In another email FORCE sent to Venmo later that same day, FORCE explained the funds in his Venmo account were personal and stolen by RR, and ?As such, this $2,500 has nothing to do with DEA, it was my personal assets that were stolen by On March 14, 2014, FORCE, again using his personal email address, directed Venmo not to contact the DEA again. The administrative subpoena addressed to Venmo contains DEA Special Agent signature stamp on the signature line. AR was acting supervisor during the relevant timeframe of the subpoena. A.P. stated he did not review or sign the subpoena and believes that FORCE, without knowledge, used signature stamp to execute the subpoena. Following submission of his letter of resignation on May 4, 2014, described above, another DEA employee witnessed FORCE taking boxes into a room where documents are taken to be permanently burned or destroyed. The contents of burn boxes have since been seized and analyzed. Among other documents, these burn boxes contained copies of the administrative subpoena to Venmo. However, superior reported that there are no copies of this subpoena in the Baltimore Silk Road case ?le. Based on the foregoing, FORCE issued and used an of?cial government subpoena for his own personal ?nancial gain and transmitted it to a third party. By doing so, there is probable cause to believe that FORCE committed a violation of the con?ict of interest statute, in violation 18 U.S.C. Section 208. I also believe FORCE was trying to cover up evidence of his use of the subpoena by AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 35 Documentl FiledOB/ZS/y; Page37 of 95 placing the copies in his burn box instead of the of?cial case ?le. Furthermore, I believe that by directing Venmo to ignore the subpoena and not to contact the DEA, FORCE was attempting to obstruct justice by concealing his wrongful use of an of?cial government subpoena for a personal matter. Additional Evidence Concerning Bitstamp Bitstamp is a global digital currency exchange headquartered in Europe with a limited US. presence in San Francisco, within the Northern District of California. On October 12, 2013, FORCE attempted to create an account with Bitstamp using identi?cation documents in the name of his DEA- issued undercover identity. Bitstamp?s veri?cation process rejected these documents as not genuine. FORCE thereafter provided Bitstamp with his own personal identi?cation documents and his true and correct name, and Bitstamp created an account in name. Bitstamp account is associated with a single bank account and with two email personal addresses. One of the personal email addresses contains the moniker ??at broker,? which refers to someone who trades in currency. The account is associated with personal checking account at Bank. On approximately November 9, 2013, FORCE made his ?rst withdrawal request from Bitstamp for approximately $34,000 worth of bitcoins.? I have reviewed personal bank records and see an incoming international wire transfer bank account in the amount of approximately $34,000 on November 13, 2013. Thereafter, FORCE made a second withdrawal request of Bitstamp for approximately $96,000 worth of bitcoins. This withdrawal request triggered Bitstamp to conduct a Know Your Customer (KYC) check, also referred to as enhanced due diligence, on approximately November 20, 2013. This check essentially involved Bitstamp asking for more information from FORCE. Throughout the latter part of November 2013, FORCE had a series of back and forth exchanges with Bitstamp using his personal email account. FORCE responded to Bitstamp?s know-your-customer queries stating, among other things, the following: am a Special Agent with the Drug Enforcement Administration . . . and learned about Bitcoin through my investigation of SILK ROAD. I have attached a copy of my resume and a scanned copy of my badge and credentials.? 19 All of these amounts represented in dollars from Bitstamp were in bitcoin based on their value at the time of the transfers. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 36 pDocumentl FiledOB/ZS/g Page38 of 95 It appears that account with Bitstamp remained active after these initial know-your- customer checks, as his personal bank records reveal two incoming deposits from his account with Bitstamp in January 2014 for approximately $57,000 and $50,000. On April 18, 2014, FORCE requested a withdrawal from his account with Bitstamp of approximately $80,000 to be deposited into his bank account. Bitstamp flagged this request and conducted additional know-your-customer checks. Bitstamp?s review showed that account had been accessed using TOR. Given this, Bitstamp blocked account.20 To unblock his account, FORCE made the following statements via an online support ticket with Bitstamp: I am a US. Department of Justice Drug Enforcement Administration (DEA), Special Agent who worked the original SILK ROAD website and corresponding investigation. I learned about Bitcoin through my investigation of DREAD PIRATE ROBERTS and SILK ROAD. I am attaching a scanned copy of my DEA credentials and badge to verify my status as Law Enforcement. Again I obtained my bitcoin from investing a couple thousand dollars in the virtual currency in the beginning of 2012 when they were selling at $4 a coin from exchanges such as GetBitcoin LLC (small ?mom and pop? exchanges). Also, I have increased my holding of bitcoin through trading, the buying and selling, of the I trade in Bitcoin. As such, I am constantly buying, shorting, selling, transferring, purchasing other assets such as real estate through and gold through goldsilverbitcoin. I plan to continue to utilize Bitstamp to purchase and sell Bitcoin at a profit. On April 24, 2014, as part of Bitstamp?s fraud and theft prevention procedures, Bitstamp inquired why FORCE accessed his account through TOR and FORCE responded via the support ticket: 20 Within a day a?er Bitstamp froze account on April 18, 2014, FORCE sent an e-mail on April 19, 2014 to another DEA Special Agent whose primary responsibility was to account for undercover funds DEA had expended. e-mail indicated that the Baltimore Silk Road Task Force had hundreds of bitcoin that they want to put into ?service? and requested the creation of a DEA account with an exchange to liquidate bitcoin into US. dollars. That Special Agent advises that April 19 e-mail was unusual because it was sent on a Saturday evening and there was a signi?cant delay in time from when FORCE had acquired the bitcoin to when he sent the e-mail. I believe, based on my investigation, that the timing of April 19 email was not coincidental given that Bitstamp had frozen his account earlier that day and he may have suspected that law enforcement had discovered that the bitcoins in his personal account were not his property. By sending such an e-mail, FORCE would be able to later maintain that he had tried to return the bitcoin to the government. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 37 Documentl Page39 of 95 utilize TOR for privacy. Don?t particularly want NSA looking over my shoulder The following day, a member of Bitstamp?s management learned of comments and thought it was strange that a government of?cial would make such a statement. account was blocked again. On April 28, 2014, FORCE made another withdrawal request from his account at Bitstamp of approximately $201,000 worth of bitcoin to his personal bank account. It is clear that account with Bitstamp was frozen and unfrozen numerous times during the April timeframe a?er FORCE veri?ed his identity. After speaking with another then-member of federal law enforcement, BRIDGES, Bitstamp subsequently processed the withdrawal request, and bank records reveal that he received approximately $201,000 to his bank account on May 6, 2014. Based on my investigation described above, I believe that some if not all of the bitcoins that went into account with Bitstamp was property that belonged to the government and/or third parties and that FORCE had come into possession of in his capacity as a DEA Special Agent, and not his own personally-acquired bitcoins, as he told Bitstamp. On or about May 2, 2014, FORCE emailed Bitstamp to request that they delete all transaction history associated with his account. I believe, based on my investigation and the timing of request, that this was an attempt by FORCE to conceal his activity. Evidence of Improved Financial Picture I have reviewed many but not all of bank records from 2009 to present. I have also reviewed a ?nancial analysis the FBI prepared of ?nancial history. Based on these sources, ?nancial situation and spending increased dramatically during 2013 and 2014, the timefrarne of the wrongdoing described herein. In summary, for the nearly two year period before FORCE worked the Silk Road case, FORCE deposited a total of approximately $250,000 into his bank accounts, an amount consistent with his federal salary. In contrast to that, the bank records show that in the just over two-year timeframe from joining the Silk Road case to his May 2014 resignation, FORCE deposited approximately $776,000 into his bank accounts, an amount that represented solely his liquidation of bitcoins. On or about February 17, 2012, FORCE began working on the Silk Road investigation. Thereafter, his ?nancial situation improved markedly. In 2013 and 2014, FORCE had total deposits that AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 38 WQGMAWNHOWOONGMAUJNHO Documentl Page40 of 95 I have traced as bitcoin liquidation proceeds worth over approximately $776,000. This includes, for example, six sizeable deposits into checking accounts from his Bitstamp account totaling approximately $518,000. There were also approximately $118,000 worth of deposits from Coinbase, another San Francisco-based digital currency exchange company where FORCE had a personal account. spending also increased after his involvement on the Baltimore Silk Road Task Force. Aside from his approximately $110,000 bitcoin investment into FORCE paid off a $22,000 government loan on November 19, 2013. On December 2, 2013, he paid off his mortgage in full, which was approximately $130,000 outstanding. On February 18, 2014, FORCE signed a ?Purchaser Agreement? with Inc., listing his net worth in excess of $1 million, and providing a $15,000 investment in three real properties. On or about May 8, 2014, presumably after learning of the govemment?s investigation and after he had resigned, FORCE wired $235,000 to an offshore account in Panama. Records that I have recovered reveal that this wire was ultimately destined for a digital currency exchange outside the US and that is not registered with the Department of the Treasury?s Financial Crimes Enforcement Network Based on evidence discussed further below, I believe that the vast majority - if not all of this wire represented proceeds of illegal activities. Other ways that FORCE appears to have spent some of the proceeds of his ultra vires activities include payments in the tens of thousands of dollars for the following: A June 2014 payment for the purchase of a company franchise; 0 An August 2014 payment to a ?Scottrade? account; 0 A September 2014 transfer to an E*Trade account; 0 A September 2014 check payable to ?Cash? These are illustrative examples and not all of the ?nancial outlays known to the government. Moreover, FORCE appears to have funded the business he opened on the side for speculating in Bitcoin, Engedi, LLC, with money from his personal checking accounts into which he had transferred ill-gotten proceeds. On May 7, 2014, FORCE opened a new bank account with Gardner Bank in the Engedi, LLC name, ?mding it 20 days later with an $8,000 check from personal checking account. And on AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 39 Documentl Filed03/25/;l5\ Page41 of 95 July 28, 2014, FORCE transferred $93,000 from his personal checking account to the Engedi account at Gardner Bank. False Statements and Obstructive Conduct Upon learning he was the subject of this investigation, FORCE, through counsel, approached the government about meeting for a voluntary interview. FORCE signed the Northern District of California and Public Integrity Section?s standard form Proffer Agreement, sometimes known as a ?Queen for a Day? letter. This Agreement is standard in criminal investigations and provided, among other things, that if FORCE was truthful, the government could not make direct use of the information FORCE provided against him in a future case-in-chief. An important exception to the protections of the Proffer Agreement was that FORCE could be prosecuted for perjury, obstruction of justice, or false statements in the event he was untruthful during the session. Pursuant to the Proffer Agreement, FORCE met with representatives from the US. Attomey?s Of?ce for the Northern District of California, the Public Integrity Section, the FBI, IRS, and OIG, on May 30, 2014. During that proffer session, FORCE was speci?cally asked whether he had ever used the moniker ?French Maid.? FORCE denied that he had. As demonstrated above, this was not truthful as FORCE had operated as ?French Maid? in communications with DPR, among other personas. Additionally, conduct throughout the investigation obstructed the real proper purpose of the Baltimore Silk Road Task Force which was to identify, locate and arrest DPR and other Silk Road users. At numerous points, FORCE corruptly obstructed the lawful investigation into DPR and Silk Road by pursuing his own personal and unlawful goals. BRIDGES PROBABLE CAUSE Bridges? Background Former Secret Service Special Agent BRIDGES was also on the Baltimore Silk Road Task Force and worked alongside FORCE. Until March 18, 2015, before he abruptly resigned, BRIDGES had been assigned to the Secret Service?s Electronic Crimes Task Force. His specialty was in computer forensics and anonymity software derived from TOR. Another member of the Baltimore Silk Road Task Force that has been interviewed con?rmed that BRIDGES was the Task Force?s subject matter expert in Bitcoin. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 40 Documentl FiledOB/ZS/g Page42 of 95 In these roles, BRIDGES had access to and used digital currency and was the af?ant on various seizure warrants pertaining to digital currency. In fact, on May 9, 2013, BRIDGES was the af?ant on one of the largest-ever seizures from a digital currency exchange. This was an approximately $2.1 million seizure pertaining to the digital currency exchange Mt. Gox, purportedly because Mt. Gox had violated 18 U.S.C. Section 1960 by failing to register with the Financial Crimes Enforcement Network and thus was engaged in operating an unlicensed money service business. This is not the only matter on which BRIDGES served as the af?ant. The Silk Road Theft and Fidelity Account C.G. was one of employees and functioned as a Silk Road customer support representative, under the usemame ?Flush.? In this role, C.G. had administrator access to the Silk Road website,? meaning C.G. had certain administrative privileges on the Silk Road website, including the ability to access vendor accounts and reset Silk Road user and vendor passwords and pins. On or about January 17, 2013, FORCE and BRIDGES were part of a team that apprehended C.G. in a controlled delivery for a kilogram of cocaine. C.G. was arrested and soon thereafter began to cooperate with law enforcement, turning over his Silk Road login credentials in the process to members of the Baltimore Silk Road Task Force. During this same timeframe C.G. also turned over access to his account and passwords to other digital currency accounts to include his Mt. Gox and Dwolla accounts. As a result of this controlled delivery, C.G. was charged with federal criminal narcotics charges.22 One of the accounts that C.G. provided access to was a Silk Road administrator account named ?Flush.? C.G. acted as a Customer Service representative on the Silk Road site using the account name ?Flush.? But on January 17, 2013, CG. turned over access to the ?Flush? account to members of the Baltimore Silk Road Task Force. C.G. also executed several consent forms authorizing law enforcement to use and assume the ?Flush? identity.23 2' This should not be construed as someone who had root access to the server. 22 It should be noted that C.G. is cooperating with law enforcement and is hoping for leniency in sentencing as a part of his cooperation. criminal history includes convictions for filing a fraudulent insurance claim and acquiring a controlled substance by prescription alteration. 23 Because of concerns about whereabouts, DPR at some point out off the ?Flush? account?s access, but through communications with DPR, C.G. was able to regain access to the account on January 20, 2013, and pass that information onto the Baltimore Silk Road Task Force. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 41 Documentl Filed03/25/I5N Page43 of 95 On January 25, 2013, CG. debriefed with FORCE, BRIDGES, and other members of the Baltimore Silk Road Task Force. According to report of the interview, C.G. showed them how to log into Silk Road vendor accounts and reset passwords, how to change the status of a seller to a vendor, how to reset pins, and information about how the Silk Road administrative ?inctions worked. text messages indicate that he left the proffer session after one day, and a Silk Road Task Force member stated that BRIDGES told him that he left the latter part of the January 25, 2013, proffer.24 On January 25, 2013, during the a?emoon and into the night, the Silk Road website suffered a series of sizeable the?s. These thefts affected certain Silk Road vendors and overlapped with the time of the CG. proffer session. The thefts were accomplished through a series of vendor password and pin resets, something that could be accomplished with the administrator access that C.G. had given to the Baltimore Silk Road Task Force. On January 26, 2013, the proffer of CG. continued. BRIDGES left early and did not participate on this day. At some point during that day, DPR communicated to Nob (FORCE) that Silk Road had suffered thefts and that those thefts were associated with account. Law enforcement questioned C.G. about this, and CG. denied that he had committed the thefts. According to chats I have reviewed from the Silk Road servers and from Ulbricht?s laptop (as well as communications between DPR and one of his employees at the time of the January 25, 2013 thefts) it appears that DPR and the employee believed C.G. was responsible for the thefts, because they managed to associate account, ?Flush,? with the the?.? As a result of belief that C.G. was responsible for the thefts, DPR communicated with Nob (FORCE) whom he believed to be a major drug dealer with the ability to procure hit men and hired Nob to have his associates kill C.G. DPR also communicated with another individual and commissioned a hit on C.G. For the hit that Nob?s associates were to perform, DPR paid Nob a total of approximately $80,000 through a bank wire transfer for the murder. FORCE and CG, together with assistance from others on the Baltimore Silk Road Task Force, then faked death to make it look 24 This Task Force member was not present for the CG. debrief but indicated that BRIDGES had told him this information. 25 On or about January 26, 2013, according to chats between DPR and another employee, ?Flush?s? administrative account was shut down in order to prevent further the?. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 42 Documentl Filed03/25/;5\ Page44 of 95 as if Nob?s associates had killed C.G. BRIDGES was to assist with perpetrating this supposed murder- for-hire by working on ?proof of death? photographs of CG. that Nob (FORCE) was to send to DPR. Based on my review of the data from the Silk Road servers, I believe the initial Silk Road thefts were likely committed by whoever was controlling a Silk Road account with the usemame ?Number13.? Prior to January 25, 2013, ?Numberl3? had been an ordinary buyer account on Silk Road. On January 25, 2013, however, ?Number13? was given vendor privileges. Also on January 25, 2013, the ?Flush? account made a transfer of approximately 900 bitcoins into account ?Number13.? This appears to have been the ?rst of multiple thefts that occurred that day from the Silk Road website. My analysis of both the block chain and data recovered from the Silk Road servers reveals that, also on January 25, 2013, a single Bitcoin address received no less than 20,000 bitcoins.26 The ?rst transaction into that Bitcoin address was a deposit by account ?Number13.? These transactions are demonstrated on the attached Exhibit (?Liquidation of Silk Road Theft Proceeds?). I believe that BRIDGES controlled and/or had access with others to ?Number13,? the account that appears to have initiated the sizeable bitcoin thefts. I believe this for at least two reasons. First, in a DEA 6 that FORCE authored dated January 23, 2013, FORCE described how he had transferred 60 bitcoins into a DEA-controlled account known as ?TrustUsJones.? Data from the Silk Road servers demonstrates that on that January 23, 2013 date, there was a 60 bitcoin transfer from ?Number13? into ?TrustUsJones.? Second, in an email dated January 23, 2013, FORCE emailed BRIDGES requesting that BRIDGES deposit bitcoins to replenish the ?TrustUsJones? account. In other words, BRIDGES, in consultation with FORCE, appears to have been controlling ?Number13? during the late January 2013 timeframe. On January 26, 2013, my analysis of the block chain reveals that at least 2,430 of the bitcoins stolen from the Silk Road went into another single Bitcoin wallet address. These transactions are also depicted on the attached Exhibit F. I have conferred with an individual who has a substantial 26 I believe that the aggregate total of the thefts was approximately 20,000 bitcoin. The dollar value of 20,000 bitcoin would have varied dramatically depending on when the value was calculated due to the ?uctuating value of bitcoin. At the time of thefts in January 2013, 20,000 bitcoin would have been worth approximately $350,000. At its peak price, however, it would have been worth far more, in excess of approximately $20 million. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 43 Documentl Page45 of 95 background in block chain analysis who advised me that this wallet funded a Mt. Gox exchange account totaling 2,430 bitcoins. As noted, Mt. Gox was the world?s largest digital currency exchange based in Japan. Chats I have reviewed between DPR and one of his employees indicate that DPR and the employee launched an internal investigation into who was responsible for the January 25, 2013 the?. Those chats reveal that own internal investigation initially led him to account ?Numberl3? as being associated with the thefts. Chats further reveal that ?Numberl3? sent DPR a chat on January 27, 2013 saying ?Whats [sic] going on . . .. I really need that money back. What has happened to all my Within the past day someone withdrawled [sic]27 all my bc from my account without my permission. The fact they must have had a pin really confuses me and makes me think it was something on your end.? This caused DPR to reply to ?Numberl3? stating ?Your account is under investigation I?m afraid. What is your relationship with the user [omitted]?? During a back and forth between the two, ?Numberl3? wrote, don?t know what any of that other crap in my history is. Look at my history, I am a buyer not a seller. What is going on man?? This caused DPR to reply, ?You?re all set, sorry for the trouble.? DPR was physically present in San Francisco on the date of these communications with ?Number13.? The Silk Road thefts were completed on January 25, 2013. Within days, BRIDGES began to text FORCE asking that FORCE (as Nob) get advice ?'om DPR about liquidating bitcoins into dollars. For example, on January 30, 2013, BRIDGES texted FORCE: ?Next time you chat with DPR do you think he would touch on the topic of how he moves bitcoins, meaning what exchange he uses? He should have some advise [sic] if you will be doing big drug deals on how to exchange all that back into US dollars.? FORCE replied that he had asked DPR that before and DPR would not provide an answer. BRIDGES replied, ?Roger. Just curious.? Approximately two weeks after the Silk Road thefts, on February 12, 2013, BRIDGES formed ?Quantum International Investments, (Quantum) and registered it with the Maryland Secretary of 27 The individual controlling ?Numberl3? on this date spelled withdrawal as ?withdrawled.? When BRIDGES texted FORCE on February 23, 2013, as discussed herein, BRIDGES also spelled the word withdrawal incorrectly using the different ?withdrawlaed.? AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 44 Documentl Page46 of 95 State. On February 22, 2013, BRIDGES established a personal investment account at Fidelity in the Quantum name. That account was associated with Social Security number and other accounts in name. That day and the next, BRIDGES began to text with FORCE about getting help and transferring bitcoins. Speci?cally, BRIDGES texted FORCE on February 22, 2013: ?Whenever you are working next can we talk. [The prosecutor] said you have the gift of convincing to do things and we need you to convince him to do something. Whenever your [sic] available can we chat.? Then on February 23, 2013, BRIDGES texted FORCE: ?Need your help with DPR if you can. I am trying to transfer out our Bitcoins and they have not shown up in over 30 hours after being withdrawlaed [sicyour workers or ?nancial guys bitcoins are not showing up? I am going to get my butt kicked if this money is missing. After 30 hours I am getting really concerned. Our one UC account is ?[omitted name]? Can you use your raport [sic] and help me out? I did the transfer yesterday morning.? It is clear that during this time period both BRIDGES and FORCE were actively monitoring the price of bitcoin. On February 24, 2013, BRIDGES texted FORCE, ?If you got bitcoins on SR [Silk Road] get them By the end of March, BRIDGES and FORCE were texting about the value of bitcoin. On March 20, 2013, FORCE texted BRIDGES ?Bitcoin just hit $63 . . . what the slip to which BRIDGES replied and then FORCE replied, ?[sp]eculation about big investors going in later this month. Along with the demand is exceeding supply.? Then on March 21, 2013, BRIDGES texted FORCE ?75 dollars now? and FORCE replied ?Geez.? I have obtained and reviewed Fidelity records for Quantum account. Those records demonstrate that between March 6, 2013 and May 7, 2013, the account received nine separate wire transfers originating from Mt. Gox in Japan. The wires totaled in excess of $820,000, and were each less than $100,000. Fidelity has con?rmed that Quantum account was funded solely by deposits from Mt. Gox and no other source. The ?nal wire from Mt. Gox to Quantum account was on May 7, 2013. Just two days later, BRIDGES served as the af?ant on a seizure warrant for $2.1 million in Mt. Gox accounts. I know from my training and experience as a law enforcement of?cer that the process of putting together an af?davit in support of a warrant is time consuming and often takes several days, if not longer, to AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 45 Documentl Filed03/25/7?15\ Page47 of 95 prepare. In serving as an af?ant for Mt. Gox bank accounts a mere two days after he had personally received a wire from Mt. Gox (the latest in a series of wires), BRIDGES had a con?ict of interest. In early 2015, by which time BRIDGES knew of the Northern District of Califomia?s investigation into the Baltimore Silk Road Task Force, BRIDGES was working on an unrelated investigation. Under the guise of that other investigation, BRIDGES contacted Coinbase, a digital currency exchange based in San Francisco. However, instead of asking only questions concerning the other investigation, Coinbase representatives report that BRIDGES engaged them in a series of questions about whether and how Mt. Gox accounts could be traced. Coinbase found this odd, given that the stated purpose of calls concerned an unrelated investigation. Based on the foregoing, I believe that BRIDGES, or someone acting on his behalf, utilized the lush? and ?Number13? accounts, but particularly the ?Flush? account to fraudulently act as an administrator to reset pins and passwords on various Silk Road vendors? accounts, and then caused bitcoins to be moved from those accounts into a particular wallet and then into the Mt. Gox exchange. Moreover, I believe that BRIDGES, and/or someone working with him or acting on his behalf, used the ?Number13? account to communicate with DPR and fraudulently represent that ?Number13? was a buyer account on Silk Road who had nothing to do with the theft to stave off investigation into ?Number13? and its activity. I believe these communications were material. At the time of these communications, DPR was in the Northern District of California, and the Bitcoin stolen as a result of the Silk Road thefts was in a Bitcoin address and had not yet been transferred to Mt. Gox. For all of these reasons, there is probable cause to believe that BRIDGES committed wire fraud, in violation of 18 U.S.C. Section 1343. Conduct During The Investigation On April 29, 2014, Bitstamp?s General Counsel advised BRIDGES by telephone from the Northern District of California that Bitstamp suspected FORCE of wrongdoing and intended to formally bring it to the attention of law enforcement via a Bank Secrecy Act ?ling. Bitstamp did so on May 1, 2014. By May 4, 2014, FORCE submitted a letter of resignation after 15 years of service to be effective later that month. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 46 Documentl FiledOB/ZS/g Page48 of 95 On approximately May 2, 2014, the US Attomey?s Of?ce for the Northern District of California Opened an of?cial investigation into FORCE concerning his activities with his Bitstamp account and bitcoin holdings. On approximately May 4, 2014, the Public Integrity Section opened an of?cial investigation into FORCE concerning his improper use of a subpoena to Venmo. On May 8, 2014, the Northern District of California and Public Integrity investigations were merged. Between April 29, 2014 and May 5, 2014, an analyst with whom BRIDGES worked at the Secret Service, E.P., ran several queries in a government database looking for Bank Secrecy Act ?lings on both FORCE and BRIDGES. That analyst later ran another query on BRIDGES on or about June 27, 2014, this time using Social Security number. I know from my training and experience that access to certain government databases is restricted and may not be used for personal matters. Based on my investigation, I believe that BRIDGES may have directed the analyst to conduct these queries because he was worried that a ?nancial institution may have made a Bank Secrecy Act ?ling on him given the multiple transfers from Japan into his Quantum Fidelity account.28 On May 28, 2014, BRIDGES was telephonically interviewed by a Special Agent with the Public Corruption Squad in San Francisco, as part of the Northern District of Califomia?s investigation. BRIDGES was joined by an attorney representing him and also by a high-level superior from the US. Secret Service. BRIDGES was advised of the nature of the interview and of the identity of the interviewer. During that interview, BRIDGES stated that although he knew FORCE through their work on the Baltimore Silk Road Task Force, they had minimal contact, and BRIDGES had no knowledge of any of activity related to the purchase of bitcoins. BRIDGES added that FORCE was unprofessional and that after learning of the Bank Secrecy Act ?ling of which FORCE was a subject, BRIDGES briefed the most senior manager in his of?ce, the Special Agent in Charge (SAC) of the Baltimore Field Of?ce. The SAC told BRIDGES not to discuss the matter with anyone. BRIDGES speci?cally denied during the May 28, 2014, interview that he ever told FORCE about the Bank Secrecy Act ?ling. He also denied having owned any Bitcoin in over a year. 28 I believe that the analyst, E.P., ultimately con?rmed that she ran BRIDGES in the database, but essentially stated that she could not remember whether BRIDGES had speci?cally asked her to do so. E.P. had Social Security number for the second query she ran. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 47 Documentl Page49 of 95 On November 13, 2014, BRIDGES was again interviewed as part of the Northern District of California?s investigation, this time by representatives from the Justice Department?s Public Integrity Section and Of?ce of the Inspector General. BRIDGES was advised of the nature of the interview and of the identity of the interviewers. BRIDGES advised he had been an af?ant on a $2.1 million seizure of accounts belonging to Mt. Gox, a digital currency exchange. He described himself as a subject matter expert on TOR, and stated that other members of the Silk Road Task Force would routinely consult him on security and undercover-type questions associated with ongoing Silk Road investigations. During this interview he reiterated what he had told the FBI Special Agent previously on May 28, 2014, namely that he and FORCE did not have a close working relationship. When questioned about Quantum International Investments, LLC, BRIDGES acknowledged that he created the LLC as a personal business venture, but stated that he had requested and obtained speci?c approval from the Secret Service Of?ce of General Counsel (OGC) to establish the LLC and use it for investment purposes. In contrast to what BRIDGES stated during these interviews, my investigation has revealed that several of statements were not accurate. These statements were capable of and did in?uence the government?s investigation. On March 18, 2015, BRIDGES resigned after being told he was being suspended. personnel advised BRIDGES to leave behind his two govemment-issued computers in the evidence vault. Although he properly tendered one computer where directed, he placed a second Apple brand laptop computer in a cabinet directly above an area that Baltimore personnel use as a ?wipe? station.29 I do not believe BRIDGES would have any reason to store the laptop in this area, other than for it to be in close proximity to computers to be wiped, as personnel has advised this is not a storage area for laptops. Moreover, after BRIDGES was advised of his suspension, he asked his supervisor if he could access his Dell laptop computer to copy electronic receipts of personal items he had purchased from intemet merchants. However, instead of copying receipts, BRIDGES began copying a folder entitled ?Bitstamp.? Upon noticing what BRIDGES was copying, his supervisor secured the laptop and did not allow BRIDGES further access. 29 Computers were le? in the ?wipe? station for the purpose of having their hard drives permanently erased. AFFIDAVIT IN SUPPORT or CRIMINAL COMPLAINT 48 A DJ Documentl Filed03/25/;5\ Page50 of 95 Money Laundering On June 2, 2014, justdays after being interviewed by the FBI Special Agent in this matter, BRIDGES wired approximately $225,000 in criminal proceeds from his Fidelity Quantum account to an account at PNC Bank. He later wired another approximately $30,000 from the Fidelity Quantum account to the PNC account on or about July 7, 2014. The PNC account was in the name of a third- party with whom BRIDGES had a personal relationship, and name was also on the account. As described above, Quantum Fidelity only contained funds transferred from Mt. Gox, and based on the evidence described in the ?Silk Road The?? section above, I believe the Mt. Gox transfers represented criminal proceeds. Given that BRIDGES wired $225,000 in criminal proceeds from his Quantum Fidelity account (representing proceeds of wire fraud, a speci?ed unlawful activity) into a different account in the name of a third-party at another ?nancial institution just days a?er being questioned in this matter, I believe that BRIDGES was attempting to conceal the source and nature of the proceeds and further impede the investigation. Given the foregoing, there is probable cause to believe that $225,000 wire constituted money laundering in violation of 18 U.S.C. 1956. CONCLUSION Based on my training and experience and the facts as set forth in this af?davit, there is probable cause to believe that FORCE has committed violations of law to include Title 18, United States Code, Section 641 (Theft of Government Property), Title 18, United States Code, Section 1343 (Wire Fraud), and Title 18, United States Code, Section 1956 (Money Laundering), and Title 18, United States Code, Section 208 (Con?ict of Interest). There is also probable cause to believe that BRIDGES has committed violations of law to include Title 18, United States Code, Section 1343 (Wire Fraud) and Title 18, United States Code, Section 1956 (Money Laundering). I therefore request that you issue the attached arrest warrants and criminal complaint. AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 49 Documentl Page51 of 95 REQUEST FOR SEALING I further request that the Court order that all papers in support of this af?davit, including the af?davit and criminal complaint, be sealed until further order of the Court or until the apprehension and/or surrender of the subjects, whichever is earlier. These documents discuss an ongoing criminal investigation that is neither public nor known to all involved in the investigation. Accordingly, there is good cause to seal these documents because their premature disclosure may jeopardize that investigation by alerting the subjects in advance of apprehension and/or surrender. In addition, for the reasons stated in the attached Paragraph meant for inclusion at Page 11 of the Af?davit, I request that that Paragraph be sealed until further Order of this Court. The government will move to unseal that Paragraph as soon as practicable, as detailed in the sealed portion of that Paragraph attached. A Proposed Order is attached. Respectfully submitted, 1 .r J. TIGRAN GAMBARYAN Special Agent Internal Revenue Service Subscribed and sworn to before me on this 25th day of March, 2015 MARIA-ELENA JAMES UNITED STATES MAGISTRATE JUDGE AFFIDAVIT IN SUPPORT OF CRIMINAL COMPLAINT 50 Case3:15-mj-70370-MAG Documentl Filed03/25/15 Page52 of 9-5 DeathFromA ve message orders 0 80mm? 30.00 the Dread Pndto Robmts Road mi . f_ it anonymous market Search Go DeammeAbove 0 10900! Shop by Category Send a massage to SR Suppo? 1 foTDY?a?idz?ohowt? i Dread Pirate Roberts. 1 i I know that you had something to do with Curtls' disappearance and death. Just wanted to let you know that I'm coming for you. Tuque. You are a dead man. Don?t you can oludo me. i De 9912:9939 1.59.91 i i 2.21.114Adm? Case3:15-mj-70370-MAG Documentl Filed03/25/15 Page54 of 95 ge55 of 95 J.. Case3:15-mj 3/4/2013 3:22:01 3/4/2013 3:2:05 3/4/2013 0:22:05134 3/4/2013 3: 22:05 127 31c untto 0131c on 30111111 31125311100 203 manna 138eD7H4pU7Seq4yxl c5 kanBPAIc/NyigB/(d BLV/szqx7YCquG hams/missz a 3 3 L0 3/5/20133:10:00 3/5/2013 3: 17:24 3/5/2013 3: 01:11 3/5/2013 0101103 127 etc sent to 61 arc sent to 134 31": sent to 203 BTC sent to JKpapYuOi'vangS3/5/2013 3: 00:51 3/5/2013 at 1:22 3/5/2013 at 14:23 3/5/2013 3: 14:24 1 8/5/1013 at 01:28 "5/2013 3, 13:16 O) 127 sent to 61 BTC 53 :11 lo 57.9995 sent to 52 BTC sent 18rmV61 1748511Nde5 IQESZEOYLKO7IY35H 5 .t 0134 llequMbWW LL A zaxF/beimrcak "Jamunm? 3? 81:: z; 12quGTnuS/i1QY917 - 5 a 3 3 CD 3/12/2013 1: 00:35 3/12/2013 3: 00:35 3/12/2013 3: 2:50 3/12/201331 2:50 3/12/2013 a! 2:53 3/12/20133:3:00 3/5/2013 3:13:45 3/12/2013 01 03.02 3/12/2013 at 13:15 77.9995 ETC sent to 49 BTC sent to 52.995 BTC sent to 66 BTC sent to 32 BTC sent to 19.9995 sent to 100 ETC sent to 40.9995 31: sent to a 50 n! to 3 mtbawisramsaeyw 10Nranzuszc?nkbs Then 24 bitcoInswm 15104 VyKSEszxapUX 8 3501mm:st r49XmYquw7Y3HU rmKivs/d?ieEleFs and?neg'gf?g?gg mKivsdeleEyast 0 8/27/1013?! 00:38 8/17/2013 at 00:33 3/23/2013 0: 1:37 3/23/2013 3: 1:35 13/30/2013:: 1:33 3/12/20131:00:04 3/12/2013 at 00:05 3/30/2013 at 02:21 3/30/20133102-03 77.9995 BTC sent to 49 arc sent to 52.9995 Bl'c sent to 66 Etc 13m to 32 311: um 10 47 BTC sent to 52.9995 ETC sent to 60.9393 ETC 53m 00 62 sent 00 1E eerUgg?fG UMGSEHKPUOEGFG 11%fo 19Vw7Bthan1dDXo 1 I GT/yzaumumaeusm cuyzaumumemm KsAqizszorismea cuGgLyuunmpma a .R These 9.5 bilcoinl wete included In the 400 ETC (Y) W103: WSHPI l? *2 . 3/27/20131:12:10 3/27/2013 3:12:24 37.5 9112300130 52.9095 01c sentto 8/30/2013 at 1:42 35 3.4975 arc gel? '0 6 136jva7Rj99TaZPm6cuGg Lyutm 9/01/2013 at 2:16 .4975 BTC tent to Ua'ommSgAsPu 8/30/2013 at 2:26 34 BTC are sent tol36jva7Rj99TaZPrn6cuGg/Lyut mTX1p4t24 from BZSNAEA. 9/01/2013 at 19:40 525 BTC are sent to 1 5 T7$ags 0210 leifc Vuv 3 9/27/2013 at 19:40 525 BTC are sent to All times are UTC (Coordinated Universal Time) Documenth Filed03/25/15 ?Page?G. of?95tall: 1 Documentl Filed03/25/1?\ Page57 of 95 Exhibit (emaii).txt 280.8822 times $607 $170,495 PATNO regarding the seizUre of 200 Bitcoin from DREAD PIRATE ROBERTS the va1ue of one Bitcoin on the date of transfer, August 4, 2013, was $96.877083, that vaiue times the 200 bitcoin equais $19,735.4166 . today Bitcoin is at $607 times the 200 bitcoin which is the equivaient of $121,400 here the government earned $101,665 the 400 bitcoin that was paid by DREAD PIRATE ROBERTS in June/Juiy of 2013 for the frauduient UK identification was worth approx1mate1y $44,000 today that same 400 bitcoin which is sitting out there in an on?1ine wa11et is now worth $242,800 (400 times $607) So the U.s. Government has made, to date, in appreciation $198,800 Page 1 :Case3:15-mj-70370-MAG Documentl Filed03/25/15 'P-age58 61?95 A -MAG Documentl Filed03/25/15 Page59 of 95 A -70370 15-mj Case3 Appendix CARL FORCE BitStamp Account Analysis "@111ny i 1.9595 1'21": 71 I: VT "'jW -1 ?1 59150691.: 30161196655163 13117631937161.1556 50619013 16113111173: . 761071951. 0 10.004 10/15/2013 22:28 10.004 . 6- 1 10 10/17/2013 18:31 . 3- 0 0 76 11/07/2013 1:16 67.999 3- 0 0 103.56 11/06/201317:45 25.56147247 5- 0 From Came 0 166.57 11/06/2013 22:57 65.00359466 0 From CampBX 2 179.61 11/06/2013 23:05 -8.75582 $2,669.42 $330.00 14.45 2 176.61 11l08/2013 23:05 ?1 $330.00 $330.00 1.46 2 175.36 11/08/2013 23:05 3.45437 $1 .139.94 6330.00 5.02 2 173.36 11/06/2013 23:05 . -2 $660.00 6330.00 2.76 2 172.66 11/06/2013 23:06 -0.5 $165.00 $330.00 0.7 2 162.66 11/06/2013 23:06 -10 $3,300.00 $330.00 13.66 2 136.57 11/06/2013 23:06 -24.2898 $8,015.64 6330.00 32.07 2 89.35 11/09/2013 14:01 49.2182 $17,472.46 $355.00 62.91 2 66.57 11/09/2013 14:05 -O.78181 $277.54 6355.00 0.69 91.9 11/11/2013 2:31 3.33135603 6- 0 0 139.68 11/11/2013 2:37 47.77669137 0 1 139.66 11/11/2013 10:19 0 (634,065:16) 6. . 30.7 0 169.97 11/11/2013 20:27 30.26967964 0 2 169.96 11/12/2013 0:51 -0.00451 $1.55 3343.77 0.01 2 162.05 11/12/2013 0:51 . -7.916 $2,721.26 3343.77 6.17 2 142.05 11/12/2013 0:51 -20 1 $6,875.40 6343.77 22.01 2 141.55 11/12/2013 0:51 .05 $171.88 $343.77 0.52 2 121.55 11/12/2013 0:51 -20 $6,875.40 6343.77 20.63 2 116.66 11/12/2013 0:51 -2.68754 $923.90 9 $343.77 2.59 0. 129.26 11/12/2013 0:56 10.41990035 3- 0 From CampBX 2 116.66 11/12/2013 15:46 -104199 $3,656.24 $350.89 10.24 0 214.5 11/12/201319:19 95.63991629 3- s- 0 From CampBX 2 214.15 11/12/2013 23:21 -0.35 $123.95 $354.14 0.35 2 210.21 11/12/2013 23:21 -3.94183 $1 395.92 6354.13 3.91 2 210.2 11/12/2013 23:21 001009 $3.57 $354.13 0.01 2 195.9 11/12/2013 23:21 -14.3 $5,064.06 6354.13 14.16 2 160.9 11/12/2013 23:22 -15 $5311.95 3354.13 14.66 2 180.79 11l12/2013 23:22 -0.11 $38.95 $354.13 0.11 2 180.78 11/12/2013 23:22 -0.005 $1.77 $354.13 0.01 2 162.76 11/12/2013 23:22 -16 $6,374.34 9354.13 16.56 2 162.7 11/12/2013 23:23 -0.08432 $29.86 6354.13 0.06 2 151.7 11/12/2013 23:23 -11 $3,895.43 6354.13 10.13 2 145.7 11l12/2013 23:25 -6 $2,124.78 $354.13 5.1 2 145 11l12/2013 23:25 ~0.7 $247.89 $354.13 0.6 2 135 11/12/2013 23:25 -10 $3,541.30 $354.13 6.5 2 134.9 11/12/2013 23:26 -0.1004 $35.55 6354.13 0.09 2 134.61 11/12/2013 23:27 -0.28103 $99.52 $354.13 0.24 2 116.66 11/12/2013 23:26 457573 $5,580.12 $354.13 13.4 0 164.35 11/13/2013 19:23 45.466 9- 0 From CampBX 2 164.01 11/13/2013 19:26 -0.332 $129.97 $391.48 0.32 2 162.51 11/13/2013 19:26 -1.5 $587.22 $391.48 1.41 2 161.93 11/13/2013 19:26 0.56066 $227.39 3391.48 0.55 2 159.58 11/13/2013 19:26 2.34797 $919.18 $391.48 2.21 2 159.06 11/13/2013 19:27 -0.5 $195.74 $391.48 0.47 A -MAG Documentl Filed03/25/15 Page60 of 95 A -70370 15-mj Case3 Appendix CARL FORCE BitStamp Account Analysis .. f" I .. i. ?1 11;; i 'i .. I. -J??t?un?iae. 1311231113? 6616.. Bmaalzui??ag?e? @1500: 16003566613: 113166160591; #21 061961. 2 156.4 -2.68535 $1,051.26 $391.46 2.53 2 156.39 11/13/2013 19:27 0.01 $3.91 $391.46 0.01 2 154.5 11/13/201319:27 - 4.89254 $740.69 $391.46 1.76 2 154.33 11/13/2013 19:26 0.17015 $66.61 6391.46 0.16 2 153.83 11/13/2013 19:26 0.5 $195.74 $391.46 0.47 2 150.16 11/13/2013 19:28 ?3.66695 $1,435.54 $391.46 3.45 2 149.66 11/13/2013 19:29 0.5 $195.74 $391.46 0.47 2 149.04 11/13/2013 19:29 0.62 $242.72 $391.46 0.59 2 147.66 11/13/201319:29 -1.38 $540.24 $391.46 1.3 2 147.16 11/13/2013 19:30 0.5 $195.74 $391.46 0.47 2 146.57 11/13/2013 19:30 0.59262 $232.00 $391.46 0.56 2 143.6 11/13/2013 19:30 -2.76599 $1,062.63 $391.46 2.6 2 143.19 11/13/2013 19:45 0.60643 $237.40 $391.46 0.57 2 140.72 11/13/2013 19:45 2.47349 $966.32 $391.46 2.33 2 137.77 11/13/2013 19:45 2.95103 $1,155.27 $391.46 2.76 2 137.27 11/13/2013 19:47 0.5 $195.74 $391.48 0.47 2 137.21 11/13/2013 19:47 0.06356 $24.89 $391.46 0.06 2 136.71 11/13/2013 19:46 0.5 $195.74 $391.46 0.47 2 136.7 11/13/2013 19:46 0.0102 $3.99 $391.46 0.01 2 126.41 11/13/2013 19:48 00.2654 $4,026.53 $391.48 6.66 2 126.37 11/13/2013 19:49 0.03646 $15.06 5391.46 0.04 2 116.66 11/13/2013 19:49 -7.51497 $2,941.96 3391.46 6.46 0 183.86 11l14l2013 2:10 64.9998 0 0 225.66 11/14/2013 2:16 41.9999 0 2 225.64 11/14/2013 15:22 0.213 366.43 $415.16 0.2 2 217.64 11/14/2013 15:23 -6 $3,321.26 3415.16 7.31 2 217.14 11/14/2013 15:23 0.5 $207.56 3415.16 0.46 2 217.1 11I14l2013 15:24 -0.04491 $18.64 5415.16 0.05 2 196.9 11/14/2013 15:36 -20.2 $6,366.23 $415.16 16.45 2 196.4 11/14/2013 15:36 . 0.5 . $207.56 $415.16 0.46 2 195.69 11/14/2013 15:36 0.51 $211.73 $415.16 0.47 2 193.46 11/14/2013 15:36 0.4305 $1,009.05 $415.16 2.22 2 166.46 11/14/2013 15:36 -7 $2906.12 $415.16 6.4 2 185.85 11l14l2013 15:36 060547 $251.37 $415.16 0.55 2 162.04 11/14/2013 15:36 -3.80923 $1,581.44 $415.16 3.46 2 161.54 11/14/2013 15:37 0.5 $207.56 $415.16 0.46 2 176.54 11/14/2013 15:37 -3 $1,245.46 $415.16 2.75 2 176.04 11/14/2013 15:38 0.5 $207.56 $415.16 0.46 2 177.75 11/14/2013 15:38 0.29502 $122.46 6415.16 0.27 2 177.41 11/14/2013 15:38 0.33612 $140.37 3415.16 0.31 2 175.9 11/14/2013 15:38 -1 .51059 $627.14 $415.16 1.36 2 156.77 11/14/2013 15:39 47.1335 $7,113.16 3415.16 15.65 2 156.27 11/14/2013 15:40 0.5 $207.56 3415.16 0.46 2 152.05 11/14/2013 15:40 0.21923 $2561.96 $415.16 5.69 2 152 11I14I2013 15:40 -0.04384 $18.20 $415.16 0.05 0 200 11/15/2013 17:03 47.9994 . 0 2 199.5 11/15/2013 17:09 0.5 $214.06 $426.13 0.46 2 194.17 11/15/2013 17:09 5.33415 $2,263.71 $426.13 5.03 2 163.96 11/15/2013 1709 00.2135 $12,935.32 6426.13 26.46 2 159.56 11/15/2013 17:09 -4.4 $1,663.77 6426.13 3.77 ge61 of 95 A -70370-MAG Documentl Filed03/25/15 Pa 15-mj Case3 Appendix CARL FORCE BitStamp Account Analysis 7731391,)? '11" "f [j 1? 'f -10? L. ma??maJ 13709019669182] .mm ".053 666 399350? 1093:0752; . ll??m-E?c??gJ 2 123.59 11/15/2013 17:09 -3597 $15,399.84 $428.13 30.8 2 111.93 11/15/2013 17:09 416065 $4,969.10 $428.13 9.94 2 109.98 11/15/2013 17:09 -2 $856.26 3423.13 1.72 2 109.42 11/15/2013 17:10 -0.56071 $240.06 $428.13 0.49 2 105.11 11/15/2013 17:10 -4.31016 $1,845.31 $428.13 3.7 2 100.11 11/15/2013 17:10 -5 $2,140.65 $428.13 4.29 2 100 11/15/2013 17:10 010492 344.92 $428.13 0.09 0 130 11/15/2013 17:47 29.9999 0 2 230 11/15/2013 22:07 100 $400.00 30 2 225.73 11/17/2013 0:29 -4.22117 - $1,848.87 $438.00 3.7 2 130 11/17/2013 0:30 -95.7788 $41,951.13 $438.00 83.91 0 162 11/17/2013 2:09 31.9999 3- 15- 0 0 211 1 1/18/2013 14:33 49 3- 0 0 268.5 11/21/2013 19:37 57.4993 3- s- 0 309.54 11/21/2013 19:37 41.0411 3- 3- 0 1 309.54 13:04 0 6- 36.4 0 366.54 1 1/26/2013 16:05 56.9998 0 2 317 11/26/2013 18:27 49.5401 841.361.33 3345.00 83.73 2 279.45 11/28/2013 12:10 37.5544 $37,554.39 $1,000.00 75.11 2 275.25 11/28/2013 12:1 0 -4.2 94,200.00 31,000.00 8.4 2 270.25 11/28/2013 12:10 -5 $5,000.00 $1,000.00 10 2 259.24 11/23/2013 12:10 -11.0075 $11,007.48 31,000.00 22.02 2 217 11/28/2013 12:10 422382 $42,238.16 51,000.00 34.43 0 265.5 11/23/2013 20:57 48.4993 3- 0 0 310.5 11/29/2013 14:42 44.9998 6- 6- 2 210.5 11/29/2013 21:11 -100 $110,000.00 $1,100.00 220 2 232.32 12/01/2013 18:34 21.81291384 9950.00 41.45 2 233.12 12/01/2013 18:34 0.8 ($760.00) 3950.00 1.52 2 233.62 12/01/2013 18:34 0.5 ($475.00) 8950.00 0.95 2 234.62 12/01/2013 18:34 1 ($950.00) $950.00 1.9 2 239.62 12/01/2013 18:34 5 $950.00 9.5 2 293.63 12/01/2013 18:34 54.01322617 9950.00 102.63 2 307.5 12/01/2013 18:34 13.86627786 3950.00 26.35 2 307.55 12/01/2013 18:34 0.05 ($47.50) $950.00 0.1 2 308.54 12/01/2013 13:34 0.993 ($948.10) $950.00 1.9 2 308.79 12/01/2013 13:34 0.25 (3237.50) 3950.00 0.43 2 310.5 12/01/2013 13:34 1.70958213 3950.00 3.25 2 317.04 12/01/2013 19:12 8.53299793 $835.00 10.92 2 360.5 12/01/2013 19:12 43.46700207 $835.00 72.59 2 363.4 12/01/2013 23:04 2.897503 $965.00 5.6 2 378.07 12/01/2013 23:04 14.66904239 $965.00 23.32 2 379.43 12/01/2013 23:04 1.40764235 $965.00 2.72 2 381.95 12/01/2013 23:05 2.474267 $965.00 4.78 2 418.06 12/01/2013 23:05 36.10733017 $965.00 69.69 2 422.22 12/01/2013 23:05 4.15796731 (154,012.44) 3935.00 8.03 2 425.25 12/01/2013 23:05 3.03473875 $965.00 5.86 2 433.43 12/01/2013 23:05 3.22535693 $965.00 15.88 2 439.94 12/01/2013 23:05 6.45931108 $965.00 12.47 2 440.94 12/01/2013 23:05 1 ($965.00) $965.00 1.93 2 450.94 12/01/2013 23:05 10 $965.00 19.3 Documentl Page62 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis - in 2 7 7 .7 i .2, 13.31977 2' - ":75 '7 ngiffb??l? 7mm 1 2 41551500151. 5551105505103 :thli?'?w? ?m?a?urc?as? $025501: 50511151?! mietsi??u?j 2 474.5 12/01/2013 23205 23.56683502 2 460.67 12/02/2013 14213 -13.8287 $13,635.11 2 '460.57 12/02/2013 14213 40.10803 $106.52 2 449.43 12/02/2013 14213 -11.141 $10,985.03 2 445.39 12/02/2013 14213 4.03661 $3,980.10 2 443.44 12/02/2013 14:13 -1 .94756 $1,920.29 2 374.94 12/02/2013 14214 - -68.5049 $67,545.85 2 30159 1210212013 14:15 -1 3.3453 513,150.42 2 360.91 12/02/2013 14215 -0.68324 $673.67 2 344.85 12/02/2013 14215 -16.0619 $15,837.01 2 334.94 12/02/2013 14215 -9.90774 $9,769.03 2 301.53 12/02/2013 14215 -33.4089 332 941.16 2 299.37 12/02/2013 14215 -2.15694 $2,126.74 2 295.06 12/02/2013 14215 -4.31465 $4,254.24 2 279.27 12/02/2013 14215 -15.7913 $15,570.21 2 274.5 12/02/2013 14216 4.76331 $4,696.63 2 276.01 12/05/2013 8251 1.51053612 2 286.01 12/05/2013 8251 10 2 287.1 12/05/2013 8251 1.08645454 2 296.84 12/05/2013 8252 9.74273684 2 301.84 12/05/2013 8252 5 2 348.16 12/0512013 8252 46.31604 2 348.18 12/05/2013 8252 0.02 ($19.00) 2 350.68 12/05/2013 8252 2.5 $950.00 4.75 2 352.01 12/05/2013 8252 1.33348379 $950.00 2.54 2 354.01 12/05/2013 8252 2 $950.00 3.8 2 354.03 12/05/2013 8252 0.02 ($19.00) $950.00 0.04 2 356.01 12/05/2013 8252 1.98 $950.00 3.77 2 356.51 12/05/2013 8252 0.5 1 ($475.00) $950.00 0.95 2 357.11 12/05/2013 0:52 0.5001175 ($570.11) 3950.00 1.15 2 372.14 12/05/2013 8252 15.03227 $950.00 28.57 2 372.18 12/05/2013 8252 0.03657777 ($34.75) $950.00 0.07 2 372.2 12/05/2013 8252 0.02 9.00) $950.00 0.04 2 372.22 12/05/2013 8252 0.023 ($21.85) $950.00 0.05 2 472.22 12/05/2013 8252 100 $950.00 190 2 474.05 12/05/2013 8252 1.823 $950.00 3.47 2 474.48 12/05/2013 8252 0.43578334 ($413.99) $950.00 0.83 2 474.5 12/05/2013 8252 0.02 ($19.00) $950.00 0.04 0 874.5 12/06/2013 3203 400 0 2 864.85 12/07/2013 1226 -9.65217 $7,480.43 $775.00 14.97 2 862.35 12/07/2013 1226 -2.5 $1,937.50 $775.00 3.88 2 853.65 12/07/2013 1 230 -8.701 $6,743.28 3775.00 13.49 2 807.59 12/07/2013 2218 46.0559 $35,693.31 $775.00 71.39 2 806.63 12/07/2013 2218 -0.96548 $748.25 $775.00 1.5 2 753.87 12/07/2013 2219 -52.7594 $40,888.54 $775.00 81.78 2 674.5 12/07/2013 2220 -79.3661 $61,508.69 $775.00 123.02 2 670.98 12/10/2013 0205 -3.52285 $3,258.64 $925.00 6.52 2 669.48 12/10/2013 0205 -1.5 $1,387.50 $925.00 2.78 2 666.83 12/10/2013 0205 -2.64548 $2,447.07 $925.00 4.9 2 666.52 12/10/2013 0205 -0.31 $286.75 $925.00 0.58 Appendix CARL FORCE BitStamp Account Analysis 15-mj-7g?70-MAG Documentl FiledOB/ZS/g Page63 of 95 Case3 I 13mm ?Qsl?J lmimm BmWEumhase Jam; L. . 2 12/10/2013 0:05 -20 $18,500.00 $925.00 37 2 12/10/2013 0:06 -35.6345 $32,961.89 $925.00 65.93 2 12/10/2013 0:06 -0.1077 $99.62 $925.00 0.2 2 12/10/2013 0:06 -5 $4,625.00 $925.00 9.25 2 12/10/2013 0:06 -45.1 $41,717.50 $925.00 83.44 2 474.5 12/10/2013 0:06 -86.1795 $79,716.03 $925.00 159.44 0 979.5 12/10/2013 23:36 505 0 2 985.47 12/11/2013 10:05 5.96900788 $895.00 10.69 2 995.97 12/11/2013 10:05 10.5 $895.00 18.8 2 1179.5 12/11/2013 10:05 183.5309921 $895.00 328.53 2 1356.95 12/19/2013 16:51 177.4514061 17,117.93) $660.00 234.24 2 1358.52 12l19/2013 16:51 1.56188975 $660.00 2.07 2 1401.79 12/19/2013 16:52 43.27658887 $660.00 57.13 2 1429.5 16:52 27.71011532 $860.00 36.58 2 1410.48 12/19/2013 20:06 -19.0256 $12,937.44 $680.00 25.88 2 1406.5 12/19/2013 20:06 -3.9774 $2,704.63 $680.00 5.41 2 1373.17 12/1912013 20:07 -33.3341 $22,667.22 $680.00 45.34 2 1373.16 12/19/2013 20:07 -0.00535 $3.64 $680.00 0.01 2 1364.4 12/19/2013 20:07 -8.75726 $5,954.94 $680.00 11.91 2 1363.67 12/19/2013 20:07 -0.73207 $497.81 $680.00 1 2 1179.5 12/19/2013 20:07 -184.168 $125,234.33 $660.00 250.47 2 1194.87 12l20l2013 19:57 15.3685139 $640.00 19.68 2 1261.95 12/20/2013 20:00 67.08258157 $640.00 85.87 2 1272.18 1 2120/2013 20:01 10.23043183 $640.00 13.1 2 1272.19 12/20/2013 20:01 0.006493 $640.00 0.01 2 1277.19 12l20l2013 20:01 5 $640.00 6.4 2 1279.19 12/20/2013 20:01 2 $640.00 2.56 2 1279.86 12l20l2013 20:01 0.66658783 ($426.62) $640.00 0.86 2 1300.97 12l20l2013 20:02 21.11489405 $640.00 27.03 2 1301 12/20/2013 20:02 0.0289 ($18.50) $640.00 0.04 2 1307 12/20/2013 20:02 6 $640.00 7.68 2 1317 12/20/2013 20:02 10 $6,400.00) $640.00 12.8 2 1339.35 12l20l2013 20:02 22.3467777 $640.00 28.61 2 1340.35 1220/2013 20:02 1 .00690194 ($644.42) $640.00 1.29 2 1361.08 12120/2013 20:02 20.72339 $640.00 26.53 2 1364.08 12/20/2013 20:02 3 $640.00 3.84 2 1366.64 12/20/2013 20:02 2.56 $640.00 3.28 2 1370.64 12/20/2013 20:02 4 $640.00 5.12 2 1370.67 12l20l2013 20:02 0.0289 ($18.50) $640.00 0.04 2 1380.67 12l20l2013 20:02 10 $640.00 12.8 2 1383.67 12/20/2013 20:02 3 .920.00) $640.00 3.84 2 1393.67 12l20/2013 20:02 10 $640.00 12.8 2 1393.91 12l20l2013 20:03 0.24268132 ($155.32) $640.00 0.32 2 1400.36 12l20l2013 20:03 6.44927 $640.00 8.26 2 1400.82 12/20/2013 20:03 0.4586923 ($293.56) $640.00 0.59 2 1400.85 12/20/2013 20:03 0.0289 ($18.50) $640.00 0.04 2 1403.13 12l20l2013 20:03 2.27991858 $640.00 2.92 2 1405.13 12l20l2013 20:03 2 $640.00 2.56 2 1413.53 12/20/2013 20:03 8.40774347 $640.00 10.77 2 1414.53 12/20/2013 20:03 1 ($640.00) $640.00 1.28 DocUmentl Filedos/zs/g Page64 of 95 CaseB Appendix CARL FORCE BitStamp Account Analysis 1991!? 1 ?7 i .. 37617766; 1 2,8331%} -l :mmrawd {amt?1%; . L- . 2 1414.73 12/20/2013 20:03 0.200400 ($128.26) $640.00 0.26 2 1424.83 12/20/2013 20:03 . 10.1 $640.00 12.93 2 1426.44 12/20/2013 20:03 1.61003965 $640.00 2.07 2 1426.47 12/20/2013 20:03 0.0289 ($18.50) $640.00 0.04 2 1428.34 12/20/2013 20:03 1.86220627 $640.00 2.39 2 1429.5 12/20/2013 20:03 1.16687579 ($746.80) $640.00 1.5 2 1179.5 12/22/2013 8:23 -250 $172,500.00 $690.00 345 1 1010 12/22/2013 23:18 469.4989 8 0 2 1008.33 12/23/2013 0:42 - -1.67808 $1,060.55 $632.00 2.13 2 1003.33 12/23/2013 0:42 499282 $3,155.46 5632.00 6.32 2 953.77 12/23/2013 1 :19 49.5655 $31,325.39 $632.00 62.66 2 953.76 12/23/2013 1:19 000581 $3.67 $632.00 0.01 2 952.73 12/23/2013 1 :19 -1.0292 $650.45 $632.00 1.31 2 952.08 12/23/2013 1:19 -0.65 $410.80 $632.00 0.83 2 950.13 12/23/2013 1:20 -1.94771 $1,230.95 $632.00 2.47 2 950.05 12/23/2013 2:13 -0.08737 $55.22 $632.00 0.12 2 948.61 12/23/2013 2:13 A ?1 .43516 $907.03 $632.00 1.82 2 948.41 12/23/2013 2:13 -0.2 $126.40 $832.00 0.26 2 926.31 12/23/2013 2:13 -221 $13,967.20 $632.00 27.94 2 926.24 12/23/2013 2:13 -0.07427 $46.94 $632.00 0.1 2 925.51 12/23/2013 2:13 -0.73261 $463.01 $632.00 0.93 2 847.35 12/23/2013 2:13 -78.1528 $49,392.56 $632.00 98.79 2 847.16 12/23/2013 2:14 -0.19282 $121.86 $632.00 0.25 2 818.43 12/23/2013 2:14 ~28.7301 $18.157.42 $632.00 36.32 2 818.23 12/23/2013 2:14 -0.2 $126.40 $632.00 0.26 2 814.22 12/23/2013 2:14 4.00552 $2,531.49 $632.00 5.07 2 808.22 12/23/2013 2:14 -6 $3,792.00 $632.00 7.59 2 806.22 12/23/2013 2:14 -2 $1,264.00 $632.00 2.53 2 803.48 12/23/2013 2:14 -2.7433 $1,733.76 $632.00 3.47 2 803.25 12/23/2013 2:14 - -o.23 $145.36 $632.00 0.3 2 802.94 12/23/2013 2:14 -0.315 $199.08 . $632.00 0.4 2 771.94 12/23/2013 2:14 ?31 $19,592.00 3632.00 39.19 2 771.71 12/23/2013 2:14 -0.22576 $142.68 $632.00 0.29 2 761.71 12/23/2013 2:14 -10 $6,320.00 $632.00 12.64 2 761.48 12/23/2013 2:14 -0.23 $145.36 $632.00 0.3 2 761.17 12/23/2013 2:14 -0.311 $196.55 $632.00 0.4 2 760.86 12/23/2013 2:14 0307 $194.02 $632.00 0.39 2 760.85 12/23/2013 2:14 -0.01 $6.32 $632.00 0.02 2 760.8 12/23/2013 2:14 -0.05 $31.60 $632.00 0.07 2 735.82 12/23/2013 2:15 -24.9813 $15,788.15 $632.00 31.58 2 735.82 12/23/2013 2:15 000315 $1.99 $632.00 0.01 2 714.22 12/23/2013 2:15 -21.6022 $13,652.60 3632.00 27.31 2 710 12/23/2013 2:15 -4.21156 $2,661.71 $632.00 5.33 2 971.21 12/27/2013 2:10 261.2074141 $738.00 385.55 2 971.35 12/27/2013 2:12 0.1369616 ($101.08) 3738.00 0.21 2 971.38 12/27/2013 2:13 0.03199572 ($23.61) $738.00 0.05 2 973.64 12/27/2013 2:13 - 2.26429855 $736.00 3.35 2 973.69 12/27/2013 2:13 0.04269106 ($31.51) $738.00 0.07 2 974.86 12/27/2013 2:15 1.17309414 ($865.74) $738.00 1.74 2 1010 12/27/2013 2:15 35.14354486 3738.00 51.88 ,m -MAG Documentl Filed03/25/15 Page65 of 95 -70370 15-mj Case3 Appendix CARL FORCE BitStamp Account Anaiysis 66106157376910. . . 1.160611% ?36 Emma} - .1 2 1062.76 12/29/2013 21:46 72.76043526 (352,693.04) - 6724.00 "105.39 2 1066.66 12/29/2013 21:46 5.67132566 (64.250.64) 6724.00 6.51 2 1091.64 12/29/2013 21:46 2.962 (62.156.97) $724.00 4.32 2 1104.69 12/29/2013 21 :49 . 13.05119 (69.449.06) $724.00 16.9 2 1110 12/29/2013 22:07 5.31504666 (63.646.10) 3724.00 7.7 2 1106.13 12/30/20131:57 -3.87264 - $2,646.39 $735.00 5.7 2 1105.13 12/30/2013 1:56 4 6735.00 3735.00 1.47 2 1090.67 12/30/2013 1:56 -14.2596 $10,480.78 $735.00 20.97 2 1089.87 12l30l2013 1:58 -1 $5735.00 $735.00 1.47 2 1069.67 12/30/2013 1:56 0.2 6147.00 6735.00 0.3 2 1088.67 12/30/2013 1:58 -1 $735.00 $735.00 1.47 2 1066.67 12/30/2013 1:56 0.00679 $4.99 6735.00 0.01 2 1067.41 12/30/2013 1:56 9 4.25759 $924.33 6735.00 1.65 2 1082.41 12l30/2013 1 :58 -5 $3,675.00 $735.00 7.35 2 1070.91 12/30/20131:56 41.5 $8,452.50 6735.00 16.91 2 1021.21 12/30/2013 2:00 49.6936 336524.79 6735.00 73.05 2 1021.21 12/30/2013 2:00 - 0.00317 $2.33 3735.00 0.01 2 1021.2 12/30/2013 2:00 0.00679 $4.99 6735.00 0.01 2 1015.9 12/30/2013 2:32 5.3016 $3,896.82 $735.00 7.6 2 1010 12/30/2013 2:32 5.69606 $4,335.08 6735.00 6.66 2 1155.63 12/31/2013 1:54 145.6247966 6725.00 211.45 2 1260 12/31/2013 1:54 104.1752012 $725.00 151.06 2 1250 01/01/2014 1:57 -10 $7,420.00 3742.00 14.64 2 1081.62 01/01/2014 1:57 466.366 $124,942.71 3742.00 249.69 2 1076.62 01/01/2014 1:58 4.99369 $3,705.46 6742.00 7.42 2 1073.42 01/01/2014 1:56 0.2001 9237447 9742.00 7 4.75 2 1010 01/01/2014 2:01 53.4196 547.057.35 6742.00 94.12 2 869.37 01/02/2014 19:05 -140.63 $108.003.79 55768.00 216.01 2 669.16 01/02/2014 19:05 0.21 3161.26 6766.00 0.33 2 665.76 01/02/2014 19:05 -3.4 32.611.20 $768.00 5.23 2 860.63 01/02/2014 19:05 5.12956 $3939.50 $768.00 7.66 2 656.21 01/02/2014 19:06 4.41995 $3,394.52 $768.00 6.79 2 655.22 01/02/2014 19:06 0.9994 $767.54 $768.00 1.54 2 654.1 01/02/2014 19:06 4.12 $660.16 $768.00 1.73 2 644.53 01/02/2014 19:06 0.57 $7349.76 $768.00 14.7 2 634.54 01/02/2014 19:06 -9.9851 $7,668.56 $768.00 15.34 2 602.15 01/02/2014 19:06 02.3901 $24,875.62 $768.00 4976 2 796.95 01/02/2014 19:07 5.1969 $3,991.22 $768.00 7.99 2 779.41 01/02/2014 19:26 47.5415 $13,471.91 $768.00 26.95 2 771.31 01/02/2014 19:26 -8.09862 $6,219.74 $768.00 12.44 2 765.56 01/02/2014 19:36 5.7511 $4416.64 $768.00 6.64 2 760.56 01/02/2014 19:36 5 $3,840.00 $768.00 7.66 2 736.96 01/02/2014 19:36 -21.58 $16,573.44 $768.00 33.15 2 736.72 01/02/2014 19:39 0.26042 $200.00 $768.00 0.4 2 734.72 01/02/2014 19:39 -4 $3,072.00 $768.00 6.1 2 730.61 01/02/2014 19:39 4.10775 $3,154.76 $768.00 6.31 2 730.41 01/02/2014 19:39 0.2 $153.60 $768.00 0.31 2 712.99 01/02/2014 19:39 47.425 $13,382.40 $768.00 26.77 2 710 01/02/2014 19:39 2.96456 $2,292.16 $768.00 4.59 2 723.54 01/03/2014 16:28 13.54031563 ($10.859.33) $802.00 21.72 Documentl Page66 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis i "1011.1" .9599.- '7 1 -?a?tatir?'a 33203213333118 .1 ?irt?1M 33133133733393 131113.133!" Jam/133333333? 1.311111333136131: 11131113133331 asap.? L- 1 2 723.34 01/03/2014 13:23 0.1 (330.20) 3302.00 0.17 2 1010 01/03/2014 13:52 233.3593342 3302.00 459.33 2 997.47 01/04/2014 13:12 42.5357 310,213.53 3315.00 20.44 2 997.37 01/04/2014 13:12 -0.1 331.50 3315.00 0.17 2 997.27 01/04/2014 13:12 -0.1 331.50 3315.00 0.17 2 933.33 01/04/2014 13:12 40.3031 33,343.95 3315.00 17.29 2 934.73 01/04/201413:12 4.37975 31,532.00 3315.00 3.07 2 984.68 01l04l2014 16:12 -0.1 $81.50 $815.00 0.17 2 983.19 01l04l2014 16:13 -1.49494 $1,218.38 $815.00 2.44 2 933.09 01/04/2014 13:13 . -0.1 331.50 3315.00 0.17 2 932.55 01/04/2014 13:13 A 0.53303 3433.52 3315.00 0.33 2 932.45 01/04/2014 13:13 -0.1 331.50 3315.00 0.17 2 932.35 01/04/2014 13:13 -0.1 331.50 3315.00 0.17 2 932.25 01/04/2014 13:13 -0.1 331.50 3315.00 0.17 2 932.23 01/04/2014 13:13 0.02003 313.37 3315.00 0.04 2 932.2 01/04/2014 13:13 .0027 322.00 3315.00 . 0.05 2 982.1 0110412014 16:14 -0.1 $81.50 $815.00 0.17 2 952.1 01/04/2014 13:14 -30 $24,450.00 3315.00 43.9 2 952 - 01/04/201413:14 -0.1 331.50 3315.00 0.17 2 390.7 01/04/2014 13:14 31.3039 349,932.33 3315.00 99.93 2 390.3 01/04/2014 13:14 -0.1 331.50 3315.00 0.17 2 333.3 01/04/2014 13:14 4.3 31,437.00 3315.00 2.94 2 377.45 01/04/201413:14 41.35 39,250.25 3315.00 13.51 2 373.14 01/04/201413:14 4.31217 31,039.42 3315.00 4 2.14 2 373.04 01/04/2014 13:14 -0.1 331.50 3315.00 0.17 2 375.94 01/04/2014 13:14 .0.1 331.50 3315.00 0.17 2 375.25 01/04/2014 13:14 0.33344 3531.03 3315.00 1.13 2 874.25 01l04l2014 16:14 ?1 $815.00 $815.00 . 1.63 2 343.32 01/04/2014 13:14 -25.4294 320,724.93 3315.00 41.45 2 343.72 01/04/2014 13:14 -0.1 331.50 3315.00 0.17 2 732.72 01/04/2014 13:14 -33 370,090.00 3315.00 140.13 2 732.32 01/04/2014 13:14 .0.1 331.50 3315.00 0.17 2 753.5 01/04/2014 13:14 4.11342 33,353.51 3315.00 3.72 2 752.22 01l04l2014 16:14 -6.28412 $5,121.56 $815.00 10.25 2 752.12 01/04/2014 13:14 -0.1 331.50 3315.00 0.17 2 744.8 01l04l2014 16:14 -7.32 $5,965.80 $815.00 11.94 2 742.72 01/04/2014 13:14 207213 31,333.33 3315.00 3.33 2 742.32 01/04/2014 13:14 -0.1 331.50 3315.00 0.17 2 712.32 01/04/2014 13:14 -30 . 324,450.00 3315.00 43.9 2 710 01/04/2014 13:14 -231934 32,135.17 3315.00 4.23 2 709.33 01/05/2014 12:41 -0.1733 3149.40 3845.00 0.3 2 705.1 01/05/2014 12:41 4.72253 33,990.57 3345.00 7.9 2 705.03 01/05/2014 12:41 -0.04 333.30 3345.00 0.07 2 704.74 01/05/2014 12:41 032139 3272.00 3345.00 0.55 2 702.74 01/05/2014 12:42 -2 31,390.00 3345.00 3.33 2 702.7 01/05/2014 12:42 7 -004 333.30 3345.00 0.07 2 702.33 01/05/2014 12:42 -0.04 333.30 3345.00 0.07 2 702.32 01/05/201412:43 . -0.04 333.30 3345.00 0.07 2 392.32 01/05/2014 12:43 -10 $3,450.00 $345.00 13.9 2 390.32 01/05/2014 12:43 -2 31390.00 3345.00 3.33 Appendix CARL FORCE BitStamp Account Analysis lS-mj-79i70-MAG Documentl Page67 of 95 Case3 31116290161 - WEE-LA 1 SEE. .2 - .. ?at-69'; 2 690.52 01/05/2014 12:43 -0.1 $84.50 $845.00 0.17 2 690.42 01/05/2014 12:43 -0.1 $84.50 $845.00 0.17 2 690.32 01/05/2014 12:43 -0.1 $84.50 $845.00 0.17 2 690.28 01l05l2014 12:43 -0.04 $33.80 $845.00 0.07 2 690.18 01/05/2014 12:43 -0.1 $84.50 $845.00 0.17 2 690.08 01l05l2014 12:43 -0.1 $84.50 $845.00 0.17 2 689.98 01/05/2014 12:43 -0.1 $84.50 $845.00 0.17 2 689.88 01l0512014 12:43 -0.1 $84.50 $845.00 0.17 2 689.78 01l05l2014 12:43 -0.1 $84.50 $845.00 0.17 2 689.68 01/05/2014 12:43 -0.1 $84.50 - $845.00 0.17 2 689.41 01/05/2014 12243 -0.27258 $230.33 $845.00 0.47 2 689.31 01/05/2014 12:43 -0.1 $84.50 $845.00 0.17 2 689.24 01/05/2014 12:43 -0.06592 . $55.70 $845.00 0.12 2 689.18 01l05l2014 12:43 -0.06592 $55.70 $845.00 0.12 2 689.17 01/05/2014 12:43 -0.01 $8.45 $845.00 0.02 2 689.16 01/05/2014 12:43 -0.01 $8.45 $845.00 0.02 2 689.09 01/05/2014 12:43 -0.06592 $55.70 $845.00 0.12 2 689.03 01/05/2014 12:43 -0.06592 $55.70 $845.00 0.12 2 689.02 01l05l2014 12:43 -0.01 $8.45 $845.00 0.02 2 688.92 01/05/2014 12:44 -0.0924 $78.08 $845.00 0.16 2 688.83 01/05/2014 12:44 . -0.0924 $78.08 $845.00 0.16 2 688.74 01/05/2014 12:44 -0.0924 $78.08 $845.00 0.16 2 688.65 01l05l2014 12:44 -0.0924 $78.08 $845.00 0.16 2 688.55 01/05/2014 12:44 -0.0924 $78.08 $845.00 0.16 2 688.46 01/05/2014 12:44 -0.0924 $78.08 $845.00 0.16 2 688.37 01l05l2014 12:44 -0.0924 $78.08 $845.00 0.16 2 685.83 01/05/2014 12:44 -2.53812 $2,144.71 $845.00 4.29 2 675.83 01/05/2014 12:44 ~10 $8.450.00 $845.00 16.9 2 675.73 01/05/2014 12:44 -0.1 $84.50 $845.00 0.17 2 675.63 01/05/2014 12:44 -0.1 $84.50 $845.00 0.17 2 675.53 01/05/2014 12:44 -0.1 $84.50 $845.00 0.17 2 675.43 01/05/2014 12:44 ?0.1 $84.50 $845.00 0.17 2 675.33 01/05/2014 12:44 -0.1 $84.50 $845.00 0.17 2 675.23 01l05l2014 12:44 -0.1 . $84.50 $845.00 0.17 2 674.77 01/05/2014 12:44 -0.465 $392.92 $845.00 0.79 2 674.73 01l05l2014 12:44 -0.04 $33.80 - $845.00 0.07 2 674.63 -0.1 $84.50 $845.00 0.17 2 674.53 01/05/2014 12:44 -0.1 $84.50 $845.00 0.17 2 673.59 01/05/2014 12:44 -0.93827 $792.84 $845.00 1.59 2 655.42 01l05l2014 12:45 -18.1684 $15,352.34 $845.00 30.71 2 655.38 01/05/2014 12:45 -0.04 $33.80 $845.00 0.07 2 652.38 01/05/2014 12:45 -3 $2,535.00 $845.00 5.07 2 649.38 01/05/2014 12:45 -3 $2.535.00 $845.00 5.07 2 649.34 01/05/2014 12:45 -0.04 $33.80 $845.00 0.07 2 644.34 01/05/2014 12:45 -5 $4,225.00 $845.00 8.45 2 643.92 01/05/2014 12:45 -0.418 $353.21 $845.00 0.71 2 643.51 01/05/2014 12:45 -0.415 - $350.68 $845.00 0.71 2 434.52 01l05l2014 12:45 -208.983 $176.591.05 $845.00 353.19 2 360 01/05/2014 12:45 -74.5194 $62,968.85 $845.00 125.94 2 390.05 01/06/2014 18:27 30.04616398 $935.00 56.19 Appendix CARL FORCE BitStamp Account Analysis 15-mj-70i70-MAG Documentl Page68 of 95 Case3 9.7 '1 .- 79119 g1; "1 ".11 1999399995155 i- 32118 196 3.119111311169311: 11133933311666 311163661" 11611621123361 2 0110612014 18:27 02 (3167.00) 3935.00 2 0110612014 13:27 0.16 (3149.60) 3935.00 2 0110612014 18:28 13.6 (317,391.00) 3935.00 2 0110612014 18:29 1.5 3935.00 2 01/06/2014 18:36 23.7305956 (324,993.11) 3935.00 2 01/06/2014 13:37 16.35667325 ($17.163.49) 3935.00 2 01/06/2014 18:37 4.40656713 (34,120.14) 3935.00 2 0110712014 19:18 25.12621229 (320.704.00) 3324.00 2 0110712014 19:18 0.93190905 (3309.09) 3624.00 2 0110712014 19:13 2 (31,646.00) 3624.00 2 01/07/2014 19:18 1.18903226 ($979.76) $824.00 2 0110712014 21:43 19.66440521 (316203.47) 3324.00 2 0110712014 21 :43 0.00265 (32.13) 3624.00 2 0110712014 21:44 6.84408879 (35,639.53) 3624.00 2 0110712014 21:44 4.2296 (33,465.19) 3324.00 6.93 2 0110712014 21 :44 0.0026 (32.14) 3624.00 0.01 2 524.94 01l07l2014 21:44 4.9 $824.00 8.08 2 52495 0110712014 21:44 0.00267 (32.20) 3324.00 0.01 2 524.95 0110712014 21:44 0.00269 (32.22) 3624.00 0.01 2 525.45 0110712014 21:44 0.5 (3412.00) 3324.00 0.63 2 525.45 0110712014 21:44 0.0027 (32.22) 3624.00 0.01 2 526.44 0110712014 21:44 0.963 (3614.11) 3324.00 1.63 2 552.44 01/07/2014 21:44 26 $824.00 42.85 2 564.44 0110712014 21:45 12 3624.00 19.73 2 574.44 0110712014 21 :45 10 3624.00 16.46 2 605.65 0110712014 21:45 31.41154777 (325,663.12) 3624.00 51.77 2 606.35 0110712014 21:45 1 (3324.00) 3324.00 1.65 2 606.05 0110712014 21:45 1.2 (3963.60) 3624.00 1.93 2 626.88 0110712014 21:45 16.62401 (315,510.93) 3624.00 31.03 2 637.01 0110712014 21:45 10.13 (33,647.12) 3324.00 16.7 2 662.33 0110712014 21:45 25.32507353 (321,279.66) 3624.00 42.56 2 630.46 0110712014 21:45 17.63244697 (314,529.14) 3624.00 29.06 2 681.35 0110712014 21:45 0.39 (3733.36) 3324.00 1.47 2 681.85 0110712014 21:45 0.49999 ($411.99) $824.00 0.83 2 631.9 0110712014 21:45 0.05 (341.20) 3324.00 0.09 2 701.9 0110712014 21:45 20 (316,430.00) 3624.00 32.96 2 702 0110712014 21:45 0.0999999 (332.40) 3624.00 0.17 2 702.05 0110712014 21:45 0.05 (341.20) 3624.00 0.00 2 702.1 0110712014 21:45 0.04409 ($36.33) 3324.00 0.03 2 705.3 0110712014 21:45 3.204 (32,640.10) 3324.00 5.29 2 807.9 01/07/2014 21 :46 102.5974 35824.00 169.09 2 603.39 0110712014 21 :46 0.494052 (3407.10) 3324.00 0.32 2 303.79 0110712014 21 :46 0.3999999 ($329.60) 3324.00 0.66 2 603.32 0110712014 21 :46 0.03 (324.72) 3324.00 0.05 2 609.22 0110712014 21 :46 0.3999999 ($329.60) 3624.00 0.66 2 309.27 0110712014 21 :46 0.05 (341.20) $824.00 0.09 2 309.77 0110712014 21 :46 0.49999 (3411.99) $824.00 0.83 2 310 0110712014 21:46 023034043 (3190.21) 3324.00 0.39 1 610 0111012014 13:04 0 - 51.64 1 790 0111012014 17:24 0 Case3 Appendix CARL FORCE BitStamp Account Analysis Documentl Page69 of 95 ir 11331"? - h, .. 69106311070512 . i . . liB??la?hE'?il 2 61001000311]. 556360311 L- 1:5 - 1 790 01/15/2014 14:14 (349,955.00) 3. 45 2 791.7 01/13/2014 15:54 3799.00 2.72 2 310.63 01/13/2014 16:01 13.92660967 3799.00 30.25 2 314.13 01/13/2014 16:02 3.55330179 3799.00 5.63 2 314.74 01/13/2014 16:04 0.55126339 ($440.46) 3799.00 0.69 2 614.33 01/13/2014 16:05 0.0913625 (373.40) 3799.00 0.15 2 390 01/13/2014 16:30 75.17695715 3799.00 120.14 2 343.3 01/19/2014 14:43 41.2069 $33,769.69 3320.00 67.53 2 332.41 01/19/2014 14:43 . 46.3366 $13.437.00 3320.00 26.33 2 327.47 01/19/2014 14:43 4.93619 $4,047.67 $320.00 3.1 2 813.09 01/19/2014 14:43 -1 4.3824 $11,793.54 $820.00 23.59 2 303.09 01/19/2014 14:43 ?5 $4,100.00 $320.00 3.2 2 307.09 01/19/2014 14:43 -1 $820.00 3320.00 1.64 2 794.1 01/19/2014 14:43 42.9399 $10,651.70 3320.00 21.31 2 790 01/19/2014 14:43 4.09305 $3,330.41 3320.00 6.73 2 990 01/22/201411:21 200 ($162.000.00) $810.00 324 1 390 01/23/2014 13:07 -100 3- 0 1 790 01/23/2014 13:14 -100 s- - 3- 0 2 756.1 01/25/2014 17:15 33.9033 327,126.61 3300.00 54.26 2 753.1 01/25/2014 17:16 -3 $2,400.00 $300.00 4.3 2 752.1 01/25/2014 17:16 -1 $300.00 $300.00 1.6 2 744.6 0112512014 17:16 -7.49631 $5,997.05 $800.00 12 2 744.35 01125/2014 17:16 -0.25 $200.00 $800.00 0.4 2 742.35 01/25/2014 17:13 .2 $1,600.00 $800.00 3.2 2 741.31 01/25/2014 17:16 053376 $431.01 3300.00 0.37 2 741.56 01/25/2014 17:17 0.249 $199.20 $300.00 0.4 2 616.55 01/25/2014 17:17 425.01 $100,003.00 3300.00 200.02 2 616.53 01/25/2014 17:17 0.02164 $17.31 3300.00 0.04 2. 611.53 01/25/2014 17:17 -5 $4,000.00 $300.00 3 2 606.46 01/25/2014 17:17 0.07135 $4,057.03 3300.00 3.12 2 606.14 0.32295 $258.36 3300.00 0.52 2 605.63 01/25/2014 17:17 0.50445 $403.56 3300.00 0.31 2 605.13 01/25/2014 17:17 0.5 $400.00 $300.00 0.3 2 604.13 .01/2512014 17:17 -1 $800.00 $800.00 1.6 2 603.66 01/25/2014 17:13 0.476 3330.30 3300.00 0.77 2 591.99 01/25/2014 17:13 41.6636 $9,330.39 3300.00 13.67 2 533.54 01/25/2014 17:18 0.44394 $2,759.15 $800.00 5.52 2 534.54 01/25/2014 17:13 4 $3,200.00 $300.00 6.4 2 513.63 01/25/2014 17:13 -70.8616 356539.23 5300.00 113.3 2 511.56 01/25/2014 17:13 2.12419 $1,699.35 3300.00 3.4 2 503.56 01/25/2014 17:13 -3 $2,400.00 $300.00 4.3 2 505.36 01/25/2014 17:13 -2.69488 $2,155.90 . 3300.00 4.32 2 503.26 01/25/2014 17:13 -25 $2,030.00 3300.00 4.16 2 501.26 01/25/2014 17:16 -2 $1,600.00 $300.00 3.2 2 496.19 01/25/2014 17218 ?5.07557 $4,060.46 $800.00 8.13 2 495.52 01/25/2014 17:13 0.66693 6533.53 3300.00 1.07 2 494.52 01/25/2014 17218 -1 $800.00 $800.00 1.6 2 490 01/25/2014 17:13 4.51552 $3,612.42 3300.00 7.23 2 777.57 01/27/2014 13:41 237.5651993 1322573363) 3735.00 451.43 2 730.46 2.8935706? 4.55 $785.00 15-mj-7O Documentl Page70 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis 13.9519 1 - . 'l ?1 .. [89131592191577 1 . 1, Jami/35.4 E) {511838 83110 ash/Wham: 18313856117813? 8583861 9013085518378 .. 7535951: 1181535803312] 2 780.95 01/27/2014 18:46 0.48894503 ($382.25) $785.00 2 783.58 01/27/2014 18:48 2.6314813 $785.00 2 790 01/27/2014 18:48 6.42280374 $785.00 2 588.08 01/27/2014 22:21 221923 $167,998.02 $757.00 2 587.91 01/27/2014 22:21 01702 $128.84 $757.00 2 555.26 01I27l2014 22:21 -1 2.6525 $9,577.94 $757.00 2 551.01 01/27/2014 22:21 ?4.25 $3,217.25 $757.00 2 518.01 01/27/2014 22:22 -35 $26,495.00 $757.00 2 515.21 01/27/2014 22:22 -0.79466 $601.55 $757.00 2 511.21 01/27/2014 22:22 ?1 $3,028.00 $757.00 2 502.51 01/27/2014 22:22 -8.7 $8,585.90 $757.00 2 490.51 01/27/2014 22:22 -12 $9,084.00 $757.00 2 490 01/27/2014 22:22 050924 $385.49 $757.00 2 490.18 01/27l2014 23:28 0.1795423 ($130.69) $727.91 2 494.18 01/27/2014 23:28 4 $728.00 2 500.7 01/27/2014 23:28 8.51840952 $728.00 2 501.23 01/27/2014 23:28 0.52429304 ($381.69) $728.00 2 573.53 01/27/2014 23:28 72.30268508 $728.00 2 581.95 01/28l2014 1:02 8.42116813 ($8290.61) $747.00 1 481.95 01/28/2014 2:01 -100 2 690 01/28/2014 5:44 208.0539019 $747.00 0 909.5 01/31/2014 5:16 219.5 2 662.86 01/31/2014 16:53 -246.646 $199,289.68 $808.00 2 838.7 02/02/2014 7:56 ~24.1567 $19,929.27 $825.00 2 838.18 02/02/2014 7:56 -0.51806 $427.40 $825.00 2 820.85 02/02/2014 7:57 ?17.537 $14,468.04 $825.00 2 815.15 02/02/2014 7:57 .55 $4,537.50 $825.00 2 614.63 02/02/2014 7:58 -0.51806 $427.40 $825.00 2 800.48 02/02/2014 8:00 -14.1522 $11,875.56 $825.00 2 580.91 02/02/2014 8:00 -19.5667 $16,142.49 $825.00 2 462.88 02/02/2014 8:00 -118.051 $97,392.35 $825.00 2 501.39 02/04/2014 9:55 38.53189607 $800.00 2 580.74 02/04/2014 9:58 79.35075207 (883480.60) $800.00 2 695.5 02l04/2014 9:58 114.76299 $800.00 2 709.5 02/04/2014 9:58 14 $800.00 2 1034.5 02/05/2014 19:29 325 $800.00 2 1034.48 02/06/2014 1:12 -0.02 $15.53 $776.80 2 1034.42 02/08/2014 1:12 0067? $52.80 $777.00 2 1034.29 02/06/2014 1:12 -0.1278 $99.40 $777.76 2 1034.03 02/06/2014 1:12 0263 $204.38 $777.11 2 1033.76 02/06/2014 1:12 0263 $204.21 $778.46 2 1033.28 02/06/2014 1:12 -0.48178 $374.72 8777.77 0.75 2 1032.8 02l06/2014 1 :12 -0.4824 $374.72 $776.77 0.75 2 1032.3 02/08/2014 1:12 -0.5 $388.50 $777.00 0.78 2 1031.68 02/08/2014 1:12 -0.61983 $492.10 8777.79 0.97 2 1021.68 02/06/2014 1:12 -10 $7,772.00 $777.20 15.55 2 1000.6 02/06/2014 1:12 -21.0785 $18,394.20 $777.77 32.79 2 950.6 02/08/2014 1:12 -50 $38,851.00 3777.02 77.71 2 950.58 02/06/2014 1:12 -0.02 $15.52 $776.10 0.04 2 950.18 02/06/2014 1:12 -0.4 $310.45 $776.13 0.83 A Documentl Filed03/25/15 Page71 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis 1? i 'i .g f' ?.?msa?w??amazr] Egaa?m?g: .v ;f . . magni?es?" Email; [Jan?iz??a'setnamei f? 2 949.68 02/06/2014 1 :12 -0.5 $388.12 $776.23 2 949.05 02/06/2014 1 :12 -0.62894 $488.08 $776.03 2 946.72 02/06/2014 1 :12 -2.33168 $1,809.62 $776.10 2 944.37 02/06/2014 1:12 -2.34771 $1,821.87 $776.02 2 941.72 02/06/2014 1 :12 -2.64832 $2,055.36 $776.10 2 936.72 02/06/2014 1:12 -5 $3,880.05 $776.01 2 929.89 02l06l2014 1:12 -6.83765 $5,306.16 $776.02 2 921.28 02l06l2014 1:12 -8.60508 . $6,677.54 $776.00 2 876.28 02l06l2014 1:12 -45 $34,920.00 $776.00 2 876.07 02l06l2014 1 :12 -0.21346 $165.64 $776.00 2 875.57 02l06l2014 1 :12 -0.5 $388.00 $776.00 2 874.57 02/06/2014 1 :12 -1 $776.00 $776.00 2 867.73 02l06/2014 1 :13 -6.83765 $5,306.02 $776.00 2 867.72 02/06/2014 1 :13 -0.01 $7.76 $776.00 2 855.04 02/06/2014 1 :13 -1 2.6792 $9,839.03 $776.00 2 434.5 02/06/2014 1 :13 420.536 $326,336.21 $776.00 2 1034.5 02/06/2014 7:32 600 ($459.600.00) $766.00 2 979.41 02/06/2014 13:37 -55.0905 $43,521.46 $790.00 2 807.6 02/06/2014 21 :57 -171.81 $131,606.83 $766.00 2 807.09 02l06l2014 21 :58 -0.51365 $393.45 $766.00 2 801.96 02/06/2014 21 :59 -5.12616 $3,926.64 $766.00 2 801.9 02/06/2014 21 :59 -0.06794 $52.04 $766.00 2 801.69 02l06l2014 21:59 ?0.20699 $158.55 $766.00 2 799.82 02/06/2014 21 :59 '-1.871 $1 .433.19 $766.00 2 798.74 02l06l2014 21:59 -1.07524 $823.63 $766.00 2 648.74 02/06/2014 22:00 -150 $114,900.00 $766.00 2 630.67 02106/2014 22:00 -18.0765 $13,846.61 $766.00 2 630.61 02l06l2014 22:00 -0.0514 $39.37 $766.00 2 629.61 02/06/2014 22:00 -1 $766.00 $766.00 2 562.85 02l06l2014 22:00 ?66.763 $51,140.42 $766.00 2 562.72 02l06l2014 22:00 -0.13 $99.58 $766.00 2 557.72 02/06/2014 22:00 -5 $3,830.00 $766.00 7.66 2 555.92 02/06/2014 22:00 -1.8 $1,378.80 $766.00 2.76 2 490.77 02106l2014 22:00 -65.1551 $49,908.81 $766.00 99.82 2 479.59 02l06l2014 22:00 -11.1753 $8,560.25 $766.00 17.13 2 423.41 02/06/2014 22:00 -56.1773 $43,031.82 $766.00 86.07 2 475.1 02/06/2014 23:49 51 .68905747 $762.00 78.78 2 477.49 02l06l2014 23:49 2.38807176 $762.00 3.64 2 477.54 02l06l2014 23:49 0.05 ($38.10) $762.00 0.08 2 478.43 02l06l2014 23:50 0.88927 ($677.62) $762.00 1.36 2 478.5 02106/2014 23:52 0.07401767 ($56.40) $762 .00 0.12 2 1028.5 02/07/2014 2:52 550 $735.00 808.5 2 1028.14 02/07/2014 9:45 -0.36378 $248.90 $684.21 0.5 2 1027.74 02/07/2014 9:45 -0.404 $275.93 $683.00 0.56 2 1027.29 02/07/2014 9:45 -0.45 $307.89 $684.21 0.62 2 1026.92 02/07/2014 9:45 -0.36378 . $248.46 $683.00 0.5 2 1026.91 02/07/2014 9:45 -0.01 $6.83 $683.00 0.02 2 1026.86 02/07/2014 9:45 -0.05 $34.15 $683.00 0.07 2 1026.41 02/07/2014 9 :45 -0.45 $307.35 $683.00 0.62 2 1026.23 02/07/2014 9:45 ?0.18076 $123.46 $683.00 0.25 Documentl Page72 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis 71.2.: 19593413139999 7? If." 7 LiB?l?hT??lJ L__296166r116$ - 130161 $536101: Lama?s/631396 WEEPJIEEL 2 1025.73 02/07/2014 9:45 -05002 $341.64 $663.00 2 1025.53 02/07/2014 9:45 02 $136.60 $663.00 2 1025.52 02/07/2014 9:45 -0.01 $6.63 $663.00 2 1025.5 02/07/2014 9:45 -002 $13.66 $683.00 2 1025.05 02/07/2014 9:45 -0.45 $307.35 $683.00 2 1024.39 02/07/2014 9:45 -0.658 $449.41 $663.00 2 1024.36 02/07/2014 9:45 -0.01 $6.63 $663.00. 0.02 2 1022.36 02/07/2014 9:45 -2 $1,356.00 $683.00 2.74 2 1021.93 02/07/2014 9:45 -045 $307.35 $683.00 0.62 2 1021.73 02/07/2014 9:57 .02 $136.60 $663.00 0.26 2 968.39 02/0712014 9:57 -53.3428 $36,433.16 $683.00 72.87 2 967.69 02/07/2014 10:04 -05 $340.00 $660.00 0.56 2 695.61 02/07/2014 10:04 -72.2762 $49,147.84 $680.00 96.3 2 694.91 02/07/2014 10:05 -0.7 $476.00 $660.00 0.96 2 693.64 02/07/2014 10:05 ?1.27578 $867.53 $560.00 1.74 2 889.64 02/07/2014 10:05 ?4.0002 $2,720.14 $680.00 5.45 2 869.52 02/07l2014 10:05 -20.1142 $13,677.64 $680.00 27.36 2 669.42 02/07/2014 10:05 .0103 $70.04 $660.00 0.15 2 660.51 02/07/2014 10:05 -8.90969 $6,056.59 $660.00 12.12 2 600.03 02/07/2014 10:05 -60.4864 $41,130.77 $660.00 62.27 2 790.13 02/07/2014 10:05 -9.9 $6,732.00 $660.00 13.47 2 790.02 02107/2014 10:05 -0.10243 $69.65 $680.00 0.14 2 789.79 02/07/2014 10:05 -0.22901 $155.73 $680.00 0.32 2 719.34 02/07/2014 10:05 -70.4565 $47,910.39 $680.00 95.83 2 715.34 02/07/2014 10:05 .4 $2,720.00 $660.00 5.44 2 710.34 02/07/2014 10:06 -5 $3,400.00 $660.00 6.6 2 704.2 02/07/2014 10:06 6.13676 $4,173.00 $660.00 6.35 2 688.61 10:06 -15.59 $10,601.20 $680.00 21.21 2 666.53 02/07/2014 10:15 -22.0818 $15,015.64 $660.00 30.04 2 663.13 02/07/2014 10:15 3.40014 $2,312.10 $660.00 4.63 2 659.05 02/07/2014 10:16 4.06096 $2,775.05 $660.00 5.56 2 659.02 02/07/2014 10:16 0.025 $17.00 $660.00 0.04 2 354.51 02/07/2014 10:16 304.514 $207,069.85 $660.00 414.14 2 155.51 02/07/2014 10:16 -199 $135,320.00 $680.00 270.64 2 150.51 02/07/2014 10:16 s-5 $3,400.00 $680.00 6.6 2 146.76 02/07/2014 10:16 3.74571 $2,547.06 $680.00 5.1 2 145.77 02/07/2014 10:16 -0.99582 $677.16 $680.00 1.35 2 136.42 02/07/2014 10:16 735 $4,998.00 $680.00 10 2 136.39 02/07/2014 10:16 -0.025 $17.00 $680.00 0.04 2 130.49 02/07/2014 10:16 4.69947 $5,371.64 9660.00 10.75 2 116.93 02/07/2014 10:16 41.5628 $7,862.72 $660.00 15.73 2 106.1 02/07/2014 10:16 -12.6301 $8,724.43 6660.00 17.45 2 10 02/07/2014 10:16 660951 $65,344.70 6660.00 130.69 2 36.79 02/07/201416:36 26.79045955 $72500 36.65 2 51.79 02/07/2014 16:36 15 $725.00 21.75 2 51.69 02/07/2014 16:36 0.09062657 ($65.71) $725.00 0.14 2 51.94 02/07/2014 16:36 0.05 ($36.25) $725.00 0.06 2 51.99 02/07/2014 16:36 0.05 ($36.25) $725.00 0.06 2 62.66 02/07/20141637 10.69416605 $7,753.26) $725.00 15.51 2 65.34 02/07/2014 16:46 2.65631349 $1,949.73) $734.00 3.9 Documentl Page73 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis -. - .1 14 39561916329119] .. if?" .. 632511111 6061611966666 6711636161611. -J .. .1, 2 65.35 02/07/2014 16:46 0.01396601 0.27) 6734.00 0.03 2 65.35 02/07/2014 16:46 0.00399664 (62.94) 6734.00 0.01 2 65.39 02/07/2014 *1 6:46 0.036 ($26.42) $734.00 . 0.06 2 944.36 02/07/2014 16:46 676.96793 ($645.162.46) 6734.00 1290.33 2 975.35 02/07/2014 16:46 30.99607627 (622,751.12) 6734.00 45.51 2 967.31 02/07/2014 16:46 11.96007672 (66.776.70) 6734.00 17.56 2 967.76 02/07/2014 16:46 0.446 ($327.36) . 6734.00 0.66 2 966.2 02/07/2014 16:46 0.444 (6325.90) 6734.00 0.66 2' 966.27 02/07/2014 16:47 0.06215258 (645.62) 6734.00 0.1 1 566.27 02/07/2014 17:15 400 5- 0 0 689.6 02/07/2014 21 :25 101.3334 6- 0 2 689.58 02/09/2014 20:59 -002166 615.11 6697.00 0.04 2 669.13 02/09/2014 20:59 -04457 6310.65 1 6697.00 0.63 2 669.11 02/09/2014 20:59 -0025 $17.42 6697.00 0.04 2 669.06 02/09/2014 20:59 -0025 617.42 6697.00 0.04 2 669.03 02/09/2014 2059 -0.04841 633.74 $697.00 0.07 2 689.01 02/09/2014 21:00 . -0.025 $17.42 $697.00 0.04 2 666.96 02/09/2014 21:00 -o.0511 635.61 6697.00 0.06 2 666.23 02/09/2014 21:11 .072755 6502.74 6691.00 1.01 2 666.23 02/09/2014 21 :12 -2 61.362.00 $691.00 2.77 2 662.62 02/09/2014 21 :12 -3.41169 $2,357.48 6691.00 4.72 2 674.04 02/09/2014 21 :12 -8.7812 $6,067.81 $691.00 12.14 2 671.94 02/09l2014 21 :12 -2.1 $1,451.10 $691.00 2.91 2 662.44 02/09/2014 21 :12 -95 66.56450 6691.00 13.13 2 662.39 21:12 -0.045 $31.10 $691.00 0.07 2 660.42 02/09/2014 21 :12 ?1 .9665 6136023 $691.00 2.73 2 656.12 02/09/2014 21:12 - 429916 62,970.72 6691.00 5.95 2 631.12 02/09/2014 21 :12 -25 $17,275.00 $691.00 34.55 2 623.99 02/09/2014 21:12 713153 64,927.69 $691.00 9.66 2 623.95 02/09/2014 21 :12 0045 $31.10 $691.00 0.07 2 622.95 02/09/2014 21:12 -1 6691.00 6691.00 1.39 2 615.76 02/09/2014 21:12 717135 64.955.40 $691.00 9.92 2 615.77 02/09/2014 21:13 -001027 67.10 6691.00 0.02 2 615.74 02/09/2014 21:14 -0.02375 $16.41 $691.00 0.04 2 615.51 02/09/2014 21 :14 -023 . 6156.93 6691 .00 0.32 2 609.51 02/09/2014 21:14 -6 64,146.00 6691.00 6.3 2 609.26 02/09/2014 21 :14 023 6156.93 6691 .00 0.32 2 606.63 02/09/2014 21 :14 -045 6310.95 6691.00 0.63 2 605.09 02/09/2014 21 :14 43.741 65 $2,585.62 6691.00 5.16 2 604.66 02/09/2014 21:15 -023 6156.93 6691.00 0.32 2 604.41 02/09/2014 21:15 -0.448 6309.57 6691 .00 0.62 2 604.36 02/09/2014 21:15 -003129 621.62 $691.00 0.05 2 604.15 02/09/2014 21 :15 -023 $158.93 6691.00 0.32 2 603.7 02/09/2014 21:15 -0.448 6309.57 6691.00 0.62 2 603.62 02/09/2014 21:15 008239 $56.93 $691.00 0.12 2 603.49 02/09/2014 21:15 -0.12746 666.07 6691.00 0.18 2 603.26 02/09/2014 21:15 -023 6156.93 6691.00 0.32 2 10 02/09/2014 21:15 . 593.259 $409,942.20 $691.00 619.69 2 17.53 02/10/2014 9:05 7.52533352 (65.124.75) 6661.00 1025 2 131.17 02/10/2014 9:14 113.6365696 (677,367.67) - 6661.00 154.76 -7O 70-MAG Documentl Filed03/25/15 Page74 of 95 15-mj Case3 Appendix CARL FORCE BitStamp Account Analysis 7 1 Li??iff?fii1??i?? I, 6 . 1 1. 1361311661.! 3391651661,. ??amghb 1016191.. .1 2 143.46 02/10/2014 10:10 12.2925933 (53.37126) 3631.00- 16.75 2 263.43 02/10/2014 10:10 120 $681.00? 163.44 2 263.73 02/10/2014 10:10 0.2635 $132.35) $681.00 0.37 2 26423 02/10/201410:10 0.5 6340.50) 3631.00 0.69 2 270.51 02/10/2014 10:1 1 6.27756795 34,275.02) 3331.00 3.56 2 272.51 02/1 0/2014 10:1 1 2 $1,362.00) $681.00 2.73 2 275.3 02/10/2014 10:1 ,1 279303915 61,902.09) $681.00 3.31 2 275.6 02/1 0/201'4 10:11 0.3 ($204.30) $681 .00 0.41 2 230.6 02/1 0/2014 10:11 5 $681.00 6.31 2 231.33 02/10/2014 10:11 1.235 (6675.03) 3631.00 1.76 2 311.33 02/10/2014 10:11 - 30 (620430.00) 3631.00 40.36 2 350.14 02/1 0/2014 10:11 33.25903397 926054.44) $681.00 52.11 2 355.14 02/10/2014 10:11 5 $681.00 6.31 2 353.14 02/10/2014 10:11 1 ($331.00) $681.00 1.37 2 353.49 02/10/2014 10:11 2.35015427 3631.00 3.21 2 353.74 02/10/2014 10:11 0.25 (317025) 3631.00 0.35 2 361.74 02/10/2014 10:11 3 $681.00 4.09 2 377.5 02/10/2014 10:12 1575913395 $681.00 21.47 - 2 421.55 02/10/2014 10:12 44.0439354 $681.00 59.99 2 423.4 02/10/2014 10:12 1.349 $681.00 2.52 2 436.49 02/10/2014 10:12 13.09301194 (33,919.75) 3631.00 17.34 2 438.49 02l10l2014 10:12 2 $681.00 2.73 2 442.73 02/10/2014 10:12 423293933 $2,916.72) 3631.00 5.34 2 456.33 02/10/2014 10:12 14.1 (39,602.10) $681.00 19.21 2 473.04 02/10/2014 10:12 21.15372992 $681.00 23.32 2 439.3 02/10/201410:12 11.2661 (37.67221) 3631.00 15.36 2 491.9 02/10/2014 10:12 2.6 $681.00 3.55 2 494.9 02/10/2014 10:12 3 $681.00 4.09 2 504.79 02/10/2014 10:12 9.33322 (36.73047) 3531.00 13.47 2 631.79 02/10/2014 10:12 127 $681.00 172.93 2 633.79 02/10/2014 10:12 2 $681.00 2.73 2 636.3 02/10/2014 10:12 53.01337715 $681.00 72.22 2 696.3 02l10/201410:12 10 3631.00 13.62 2 613.92 02l10/2014 11:56 -82.8816 $53,873.05 35650.00 107.75 2 612.23 02/10/2014 12:07 -1.64714 31.01299 $615.00 2.03 2 612.24 02/10/2014 12:07 0.03625 622.29 3615.00 0.05 2 612.14 02/10/2014 12:07 0.09479 $53.29 $615.00 0.12 2 612.04 02/10/2014 12:07 0.1 $61.50 $615.00 0.13 2 611.39 02/1 012014 12:07 -0.65357 3401.95 3615.00 0.31 2 610.39 02/10/2014 12:07 -1 $615.00 $615.00 1.23 2 602.34 02/10/2014 12:07 0.05 $4,950.75 3615.00 9.91 2 602.32 02/10/2014 12:07 0.024 $14.76 $615.00 0.03 2 602.23 02/10/2014 12:07 0.03625 $22.29 $615.00 0.05 2 602.13 02/10/2014 12:07 0.1 $61.50 $615.00 0.13 2 572.13 02/10/2014 12:07 -30 313,450.00 $615.00 36.9 2 572.1 02/10/2014 12:07 0.03 $49.20 $315.00 0.1 2 572.06 02/10/2014 12:07 0.03625 $22.29 $615.00 0.05 2 572.03 02/10/2014 12:03 0.03625 322.29 3615.00 0.05 2 571.99 02/10/2014 1203 0.03625 322.29 55615.0() 0.05 2 571.35 02/10/2014 12:03 0.14143 $37.01 $615.00 0.13 Appendix CARL FORCE BitStamp Account Analysis -MAG Documentl Page75 of95 ?0 1 -7O 15-mj Case3 - . f. -I 13862695338 7 mam zau?mnasgi??m . A . - 2 571.35 02/10/2014 12:08 -0.5 $307.50 2 570.35 0211012014 12:08 -1 $615.00 2 406.34 0211012014 12:08 . -164.007 $100,864.14 $615.00 201.73 2 10 0211012014 12:08 -396.339 $243,748.75 $6,151.00 487.5 0 410 0211012014 12:25 399.9999 0 2 373.66 0211012014 14:36 . -36.3424 $23,622.57 $650.00 4725 2: 368.03 02110120141436 5.62698 $3,657.54 $650.00 7.32 2 360.9 02110120141436 47.13 $4,634.50 . $650.00 9.27 2 3599 0211012014 14:36 -1 $650.00 $650.00 1.3 2 356.9 0211'012014314236 -3 $1,950.00 $650.00 3.9 2 288.35 02110120141436 -68.55 $44,557.50 $650.00 89.1 2 254.79 021101201 4:14:36 -33.5654 $21,817.52 $650.00 43.64 2 188.99 0211012014 14:36 -65.8011? $42,770.70 $650.00 85.55 2 182.43 0211012014 14:37 -6.56 $4,264.00 $650.00 8.53 2 172.43 021101201414237 -10 $6,500.00 $650.00 13 2 62.99 02110120141437 -109.436 $71 ,133;32 $650.00 142.27 2 60.17 0211012014 14:37 -2.82323 $1 .6351 0 $650.00 3.68 2 55.16 02110120141437 . -5.01 $3,256.50 $650.00 6.52 2 10 02110120141437 45.1549 $29,350.69 $650.00 58.71 2 143.28 0211312014 17:58 1332781713 . $640.00 170.6 2 14828 02113120141758 5 $640.00 6.4 2 153.28 0211312014 17:58 5 $640.00. 6.4 2 182.28 02113120141758 . 29 $640.00 37.1 2 187.28 021131201 41758 5 $640.00 6.4 2 208.08 021131201 41758 20.8 $640.00 26.63 2 212.58 021131201417:59 4.50066 $640.00 5.77 2 222.42 02113120141759 9.83964 $640.00 12.6 2 226.42: 7 021131201417259 4 $640.00 5.12 2 227.42 0211312014 17:59 . . 1 ($640.00) $640.00 1.28 2 262.42. 0211312014 17:59 35 $640.00 44.8 2 324.56 02113120114 17:59 62.13412394 $640.00 7 79.5 2? 326.77 0211312014 17:59 2.21752813 .419.22) $640.00 2.84 2 331.79 0211312014 17:59 5.02 $3212.80) $640.00 6.43 2 332.29 0211312014 17:59 0.5 ($320.00) $640.00, 0.64 2 334.29 02113120141759 2 $640.00 2.56 2 334.52 0211312014 17:59 0.23 ($147.20) $640.00 0.3 2 334.75 - 0211312014 '1 7:59, 0.23 ($147.20) . $640.00 0.3 2 338.57 02113120141759 3.82 $640.00 4.89 2 338.8 02113120141759 0.23 ($147.20) $640.00 0.3 2* 345.81 02113120141759 7.0022923 $640.00 8.97 2 348.89 021131201418:00 3.08554 ,974.75) $640.00 3.95 2 354.06 0211312014 18:00 5.16937721 $640.00 6.62 2 362.19 021131201418:00 8.1321787 $640.00 A 10.41 2 363.19 0211312014 18:00 1 ($640.00) $640.00 1.28 2 389.73 02113120141890 26.541051 $640.00 33.98 2 414 0211312014 18:00 24.26943742 $640.00 31.07 2 600.18 0211312014 21 :21 186.1778195 $608.00 226.4 2 607.65 0211312014 21:21 7.46530618 $608.00 9.08 2 623.71 0211312014 21 :22 16.06259934 $608.00 19.54 2 625.13 0211312014 21:22 1.42395 ($865.76) $608.00 1.74 ge76 of 95 A O-MAG Documentl Filed03/25/15 Pa 1 Case3 Appendix CARL FORCE BitStamp Account Analysis 1" Z: i if" 7 311751- I 133150391. 1 L. .1 ?5 ?1053 551$ . 'a 1131353751? mf?ff'FBET??i. 5.1111111631797115. . BEE- ?nk L- .. - 2 625.37 0211312014 21 :22 0.24073846 ($146.37) . 0.3 2 669.37 0211312014 21 :22 44 53.51 2 678.56 0211312014 21:22 9.18479 11.17 2 741.56 0211312014 21:22 63 76.61 2 746.56 0211312014 21:22 5 (553,040.00) 6.08 2 750.91 0211312014 21:22 4.35 (552,644.80) 5.29 2 753.71 0211312014 21:22 2 2.8 $1,702.40) 3.41 2 792.51 0211312014 21:22 38.8 47.19 -2 805.05 0211312014 21:22 12.54294711 15.26 2 813.05 0211312014 21:22 8 9.73 2 843.05 0211312014 21:22 30 36.48 2 901.25 0211312014 21:22 58.20014515 $35,385.69) 70.78 2 962.09 0211312014 21:22 60.83678914 73.98 2 965.27 0211312014 21:22 3.17848767 3.87 2 970.27 0211312014 21:22 5 6.08 2 1026.34 0211312014 21:22 56.06985233 68.19 2 1026.84 0211312014 21:22 0.50254181 ($305.55) 0.62 2 1027.34 0211312014 21 :23 0.5 ($304.00) 0.61 2 1032.58 0211312014 21:23 5.23552532 6.37 2 1037.22 0211312014 21:23 4.64490152 5.65 2 1037.22 0211312014 21:23 I 0 0.01 2 1094.18 0211312014 21:23 56.96323708 69.27 2 1097.9 0211312014 21:23 3.72 4.53 2 1098.4 0211312014 21:23 0.5 ($304.00) 0.61 2 1099.3 0211312014 21:23 0.9 ($547.20) 1.1 2 1099.41 0211312014 21:23 0.11038469 ($67.11) 0.14 2 1109.52 0211312014 21:23 10.10110475 12.29 2 1110.71 0211312014 21:23 1.19888 ($728.92) 1.46 2 1031.47 0211412014 3:36 -79.2422 $47,545.35 95.1 2 988.58 0211412014 3:37 42.8909 $25,734.52 51.47 2 866.98 0211412014 3:38 -121.6 . $72,960.00 145.92 2 854.05 0211412014 3:38 42.9269 $7,756.13 15.52 2 804.05 0211412014 3:38 -50 $30,000.00 60 2 803.95 0211412014 3:38 -0.1 $60.00 0.12 2 610 0211412014 3:38 -193.95 $116,370.00 232.74 2 650.31 0211412014 18:06 40.30741878 - 54.18 2 677.97 0211412014 18:07 27.66358109 37.18 2 711.09 0211412014 18:07 33.11541565 44.51 2 711.19 021141201418:07 0.1 ($67.20) 0.14 2 711.29 0211412014 18:07 0.1 ($67.20) 0.14 2 728.07 0211412014 18:07 16.78 22.56 2 728.17 0211412014 18:07 0.1 ($67.20) 0.14 2 766.86 0211412014 18:09 38.6846953 52 2 766.96 0211412014 18:09 0.1 ($67.20) $672.00 0.14 2 781.55 0211412014 18:10 14.59562433 $672.00 19.62 2 787.11 0211412014 18:10 5.56123809 . $672.00 7.48 2 792.52 0211412014 18:10 5.41278875 $672.00 7.28 2 794.52 0211412014 18:10 2 $672.00 2.69 2 794.85 0211412014 18:10 0.3230202? ($217.07) $672.00 0.44 2 796.67 0211412014 18:10 1.82689557 $672.00 2.46 ge77_of 95. A A -70370-MAG Documentl Filed03/25/15 Pa 15-mj Case3 Appendix CARL FORCE BitStamp Account Analysis 1 i' 7 ?1 Eff?! '1 ?1 .3. 03515666; 11351560163..-J BF .m??faml 60161661615636 61663661611 [Igum?sewam $151160: .1. 11021193511111 .1 EB.-- .2 2 796.67 02/14/2014 16:10 2 $672.00 2.69 2 610.53 02/14/2014 16:11 11.65045677 (37.963.51) $672.00 15.93 2 810.85 02/14/2014 18:11 0.32626567 ($219.26) $672.00 0.44 2 621.79 02/14/2014 18:14 10.93744673 $672.00 14.7 2 919.95 02/14/2014 16:16 96.16497771 $672.00 131.94 2 960.39 02/14/2014 19:13 40.43610579 $672.00 54.35 2 974.7 02/14/2014 19:25 14.30921344 $672.00 19.24 2 976.0 02/14/2014 19:25 1.37666 ($926.47) $672.00 1.66 2 976.15 02/14/2014 19:26 0.07280907 ($46.93) $672.00 0.1 2 976.23 02/14/2014 19:26 0.07692307 ($51.69) $672.00 0.11 2 1055.5 02/14/2014 19:26 7927442184 55672.00 106.55 2 1055.26 02/16/2014 19:19 0.22331 $134.66 $604.00 0.27 2 . 1054.61 02/16/2014 19:19 -0.67118 $405.39 $604.00 0.62 2 1053.64 02/16/2014 19:19 0.96609 $563.52 $604.00 1.17 2 1052.64 02/16/2014 19:19 -1 $604.00 $604.00 1.21 2 1052.61 02/16l2014 19:20 0.031 $16.72 $604.00 0.04 2 1024.71 02/16/2014 19:20 -27.8999 $16,651.53 $604.00 33.71 2 1010.94 02/16/2014 19:21 -13.776 $8,320.68 $604.00 16.65 2 1010.66 02/16/2014 19:21 0.05921 $35.77 $604.00 0.06 2 1010.63 02/16/201419:21 0.05236 $31.62 $604.00 0.07 2 1010.6 02/16/2014 19:21 0.02576 $15.57 $604.00 0.04 2 1010.49 02/16/2014 19:22 0.31023 . $167.36 $604.00 0.36 2 960.41 02/16/2014 19:22 -30.0809 $16,166.66 $604.00 36.34 2 960.31 02/16/2014 19:22 0.097 $56.59 $604.00 0.12 2 979.31 02/16/2014 19:22 ?1 $604.00 $604.00 1.21 2 974.73 02/16/201419:22 4.58554 $2,769.66 $604.00 5.54 - 2 973.73 02/16/201419:22 -1 $604.00 $604.00 1.21 2 879.24 02/16l2014 19:22 -94.4868 $57,070.03 $604.00 114.15 2 876.47 02/16/2014 19:22 -2.77355 $1 .675.22 3604.00 3.36 2 676.36 02/16/2014 19:22 0.065 $51.34 $604.00 0.11 2 874.38 02/16/2014 19:22 -2 $1,206.00 - $604.00 2.42 2 674.34 02/16/2014 19:22 0.03767 $22.75 $604.00 0.05 2 674.31 02/16/2014 19:26 0.031 616.36 $593.00 0.04 2 874.21 02/16/2014 19:26 -0.1 $59.45 $594.45 0.12 2 674.06 02/16/2014 19:26 0.13 $77.17 $593.59 0.16 2 673.95 02/16/2014 19:26 0.13 $77.06 $592.92 0.16 2 673.11 02/16/2014 19:26 0.64317 $500.00 $593.00 1 2 646.52 02/16/2014 19:26 -26.5837 $15,617.30 $595.00 31.64 2 646.5 02/16/2014 19:26 0.02 $11.64 $592.00 0.03 2 846.42 19:26 -0.08 $47.36 $592.00 0.1 2 646.29 02/16/2014 19:26 0.13 $77.04 $592.59 0.16 2 645.31 02/16/2014 19:26 0.96662 $563.57 6590.17 1.17 2 642.61 02/16/2014 19:26 -25 $1,460.25 $592.10 2.97 2 639.61 02/16/201419:26 -3 $1,773.33 $591.11 3.55 2 835.81 19:26 -4 $2,364.40 $591.10 4.73 2 630.61 02/16/2014 19:26 -5 $2,955.60 $591.12 5.92 2 625.61 02/16/2014 19:26 -5 $2,955.00 $591.00 5.91 2 620.61 02/16/2014 19:26 -5 $2,950.90 6590.16 5.91 2 613.46 02/16/2014 19:26 -7.3236 $4,335.57 3592.00 6.66 2 605.11 02/16/2014 19:26 -8.37683 $4,951.71 $591.12 9.91 ge78 of 95 1?5 -70370-MAG Documentlt Filed03/25/15 Pa 15-mj Case3 Appendix CARL FORCE BitStamp Account Analysis 73.93821in "If" m" [793939599651 .. 1? r' . 1331611661} 1.251326115010323 656%3165 E55566 5503136656930: 511 . . 2 600.11 02/16/2014 19:26 -5 $2,950.65 $590.17 5.91 2 799.96 012414 $73.27 $590.17 0.15 2 799.9 02/16/2014 19:26 . -0.08 $47.21 $590.17 0.1 2 799.69 02/16/2014 19:26 ?0.0102 $6.02 $590.17 0.02 2 799.79 02/16/2014 19:26 ?0.1 $59.02 $590.17 0.12 2 799.74 02/16/201419:26 -0.05 $29.51 . $590.17 0.06 2 796.74 02/16/2014 19:26 -1 $590.17 $590.17 1.19 2 796.67 02/16/2014 19:26 -0.07 $41.31 $590.17 0.09 2 796.57 02/16/2014 19:26 -0.1 $59.02 3590.17 0.12 2 796.07 02l16l2014 19:26 -0.5 $295.06 $590.17 0.6 2 793.67 02/16/2014 19:26 -4.4 $2,596.75 $590.17 5.2 2 793.64 02/16/2014 19:26 0031 $16.30 $590.17 0.04 2 793.59 02/16l2014 19:26 -0.05 $29.51 6590.17 0.06 2 793.54 02/16/2014 19:26 -0.05 $29.51 $590.17 0.06 2 793.49 02/16/2014 19:26 004704 $27.76 $590.17 0.06 2 766.49 02/16/2014 19:26 -5 $2,950.65 $590.17 5.91 2 786.39 02/16l2014 19:26 -2.1 $1,239.36 $590.17 2.48 2 766.29 02/16/2014 19:26 ?0.1 $59.02 $590.17 0.12 2 766.24 02/16/2014 19:26 -005 $29.51 $590.17 0.06 2 766.14 02/16/2014 19:26 -0.1 $59.02 $590.17 0.12 . 2 765.6 02l16l201419:26 - -0.53855 $317.64 $590.17 0.64 2 761.6 02/16/2014 19:26 .4 $2,360.66 $590.17 4.73 2 776.8 02/16l2014 19:26 -4.8 $2,832.82 $590.17 5.67 2 773.6 02/16/2014 19:26 -3 $1,770.51 $590.17 3.55 2 766.6 02/16/2014 19:26 -5 $2,950.65 3590.17 5.91 2 766.39 02/16/2014 19:26 -0.41085 $242.47 $590.17 0.49 2 766.34 02/16/2014 19:27 -0.05 $29.51 3590.17 0.06 2 767.34 02/16l2014 19:27 -1 $590.17 $590.17 1.19 2 757.34 02/16/2014 19:27 - -10 $5,901.70 $590.17 11.61 2 697.74 02/16/2014 19:27 -59.6063 $35,179.02 $590.17 70.36 2 697.66 02/16/2014 19:27 -005921 $34.95 $590.17 0.07 2 696.63 02/16/2014 19:27 ?1 .04209 $615.01 $590.17 1.24 2 696.53 02/16/2014 19:27 ?0.1 $59.02 $590.17 0.12 2 696.5 02/16/2014 19:27 -0.031 $18.30 $590.17 0.04 2 696.13 02/16/2014 19:27 037119 $219.07 $590.17 044 2 695.63 02/16/2014 19:27 -0.5 $295.06 $590.17 0.6 2 690.36 02/16/2014 19:27 5.24953 $3,096.12 $590.17 6.2 2 690.36 02/16/2014 19:27 .002 $11.60 $590.17 0.03 2 669.96 02/16/2014 19:27 -0.4 $236.07 $590.17 0.48 2 669.9 02/16/2014 19:27 -0.06 $35.41 $590.17 0.08 2 666.6 02/16/2014 19:27 21.3021 $12,571.64 $590.17 25.15 2 656.6 02/16/201419227 -10 $5,901.70 3590.17 11.61 2 638.6 02/16/2014 19:27 -20 $11,803.40 $590.17 23.61 2 613.31 02/16/2014 19:27 . -25.2913 $14,926.16 $590.17 29.66 2 613.29 02/16/201419:27 -0.02 $11.80 $590.17 0.03 2 613.24 02/16/2014 19:27 -0.05 $29.51 $590.17. 0.06 2 601.93 02/16/2014 19:27 41.3083 $6,673.64 $590.17 13.35 2 541.93 02/16/2014 19:27 -60 $35,410.20 $590.17 70.63 2 541.66 19:27 ?0.05 $29.51 $590.17 0.06 2 540.34 02/16/2014 19:27 -1.5381 $907.74 $590.17 1.62 70-MAG Documentl Page79 of 95 15-mj-7O Case3 Appendix CARL FORCE BitStamp Account Anaiysis .. . iBl'l?LCt?Ee 76:31? i . 511 =3?Bi1r2?hase iB?iEiS?l?Ll . HEB: 2 535.34 02/16/2014 19:27 -5 $2,950.85 $590.17 5.91 2 515.93 02/19/2014 4:44 -19.4094 $12,227.95 $630.00 24.46 2 235.34 02/19/2014 18:59 -280.591 . $176,772.05 $630.00 353.55 2 535.34 02/19/2014 22:17 300 . $619.00 371.4 2 535.35 1 :16 0.00634845 $628.50 0.01 2 763.66 02/20/2014 3:12 228.3149817 $623.00 284.49 2 839.35 02/20/2014 3:14 75.68501826 $623.00 94.31 2 860.14 02/20/2014 17:09 20.79112079 $579.00 24.08 2 863.24 02/20/2014 17:25 3.1000115 $579.00 3.59 2 865.64 02/20/2014 17:25 2.4 $579.00 2.78 2 865.69 02/20/2014 17:25 0.04868991 ($28.19) $579.00 0.06 2 867.69 02/20/2014 17:25 2 $579.00 2.32 2 875.18 02/20/2014 17:26 7.4960400? $579.00 8.69 2 875.23 02/20/2014 17:26 0.04653051 ($26.94) $579.00 0.06 2 882.15 02/20l2014 17:26 6.92 $579.00 8.02 2 882.4 02/20/2014 17:26 0.25257536 ($146.24) $579.00 0.3 2 892.4 02/20/2014 17:26 10 $579.00 11.58 2 892.45 02/20/2014 17:26 0.04446756 ($25.75) $579.00 0.06 2 964.85 02/20/2014 17:26 72.39875552 $579.00 83.84 .2 986.86 02/20/2014 17:27 22.00819477 $579.00 25.49 2 1036.86 02/20/2014 17:27 50 $579.00 57.9 2 1036.9 02/20/2014 17:27 0.03987007 ($23.08) $579.00 0.05 2 1038.19 02/20/2014 17:27 1.29762344 ($751.32) $579.00 1.51 2 1041.25 02/20/2014 17:27 3.054 ,768.27) $579.00 3.54 2 1041.45 02/20/2014 17:27 0.2 ($115.80) $579.00 0.24 2 1041.48 02/20/2014 17:27 . 0.03810205 ($22.06) $579.00 0.05 2 1043.28 02/20/2014 17:28 1.8 $579.00 2.09 2 1043.32 02/20/2014 17:28 0.03484683 ($20.18) $579.00 0.05 2 1043.35 02/20/2014 17:29 0.03330803 ($19.29) $579.00 0.04 2 1049 02/20/2014 17:29 5.64363 $579.00 6.54 2 1049.75 02/20/2014 17:29 0.75223359 ($435.54) $579.00 0.88 2 995.38 02l21/2014 0:45 ?54.3719 $30,176.43 $555.00 60.36 2 995.18 02l21/2014 0:45 -0.19502 $108.23 $555.00 0.22 2 977.69 02l21/2014 0:45 -17.4944 $9,709.36 $555.00 19.42 2 977.64 02/21/2014 0:46 -0.05 $27.75 $555.00 0.06 2 971.26 02l21/2014 0:46 -6.37982 $3,540.80 $555.00 7.09 2 969.83 02l21/2014 0:46 1 -1.4273 $792.15 $555.00 1.59 2 966.02 02l21/2014 0:47 -3.81017 $2.1 14.65 $555.00 4.23 2 951.72 02l21/2014 0:47 -14.3017 $7,937.43 $555.00 15.88 2 950.1 02/21/2014 0:47 -1 .61823 $898.12 $555.00 1.8 2 1052.1 02l21/2014 1:29 102 $540.00 110.16 2 1051.75 02/21/2014 2:03 -0.35149 $195.08 $555.00 0.4 2 1020.67 02/21/2014 15:04 -31.079 $17,808.29 $573.00 35.62 2 1013.67 02/21/2014 15:04 -6.99517 $4,008.23 $573.00 8.02 2 997.17 02l21/2014 15:04 -16.5069 $9,458.45 $573.00 18.92 2 997.14 02l21/2014 15:04 -0.02786 $15.96 $573.00 0.04 2 996.5 02l21/2014 15:04 -0.641 $367.29 $573.00 0.74 2 995.84 02l21/2014 15:04 -0.656 $375.89 $573.00 0.76 2 988.39 02/21/2014 15:04 - -7.45168 $4,269.81 $573.00 8.54 2 967.89 02l21/2014 15:05 -20.5 $11,746.50 $573.00 23.5 15-mj-7O 70-MAG Documentl Page80 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis 1" 3.0.5.1127 1651506695 63.161310615031111 ., . . .Bmgehr??a'?e EVEGESBM 3 40650656136701 - 6116:5762. 1 11611166?de - 33' 2 966.15 02/21/2014 15:05 4.74033 3997.21 3573.00 2 2 965.56 02/21/2014 15:05 3.593% 3339.62 3573.00 0.66 2 951.75 02/21/2014 15:06 43.609 37,912.54 4 3573.00 15.03 2 940.13 02/22/2014 16:26 -3.61879 32,124.23 3507.00 4.25 2 903.01 02/22/2014 16:26 45.1219 $26,466.56 3567.00 52.96 2 601.96 02/22/2014 16:20 21.032 $12,345.79 3567.00 24.7 2 679.96 02/22/2014 16:26 -2 31 .174.00 3567.00 2.35 2 677.67 02/22/2014 16:29 2.10743 $1,237.06 3567.00 2.46 2 762.56 02/22/201416:29 -95.2876 . 355,933.60 3567.00 111.67 2 762.57 02/22/2014 16:29 0.01511 36.67 3507.00 0.02 2 751.95 02/22/2014 16:29 -30.6171 317,972.22 3507.00 35.95 2 751.75 02/22/2014 16:29 -020009 . 3117.45 3567.00 0.24 2 729.19 02/23/2014 16:32 -22.5638 314,215.17 3630.00 26.44 2 715.2 02/23/2014 16:32 43.9661 $8,812.52 3630.00 17.63 2 702. 0223/2014 16:33 -12.8 36,064.00 3630.00 16.13 2 702.2 02/23/2014 16:33 .02 3126.00 3630.00 0.26 2 654.7 16:33 -47.4945 $29,921.52 $630.00 59.85 2 651.75 02/23/2014 16:33 -2.95362 $1,660.76 3630.00 3.73 2 717.11 02/24/2014 0:08 6536077499 (339,070.07) 3610.00 79.75 2 721.79 02/24/2014 0:06 4.67937293 (32.054.42) 3610.00 5.71 2 725.09 02/24/2014 0:09 329701593 (32,011.16) 3610.00 4.03 2 735.66 02/24/2014 0:09 10.79434 (36,564.55) $610.00 13.17 2 736.88 02l24/2014 0:09 1 ($610.00) $610.00 1.22 2 737.66 02/24/2014 0:09 1 (3610.00) $610.00 1.22 2 739.26 02/24/2014 0:09 1.37490164 (3636.69) 3610.00 1.66 2 743.49 02/24/2014 0:09 4.23062191 (32.560.00) 3610.00 5.17 2 744.49 02/24/2014 0:09 1 (3010.00) 3610.00 1.22 2 745.49 02/24/2014 0:09 1 (3610.00) 3610.00 1.22 2 746.49 02/24/2014 0:09 1 ($610.00) $610.00 1.22 2 747.49 02/24/2014 0:09 1 (3610.00) 3610.00 1.22 2 746.16 02/24/2014 0:10 0.69476 (3423.02) 3610.00 0.05 2 749.16 02/24/2014 0:10 1 (3610.00) 3610.00 1.22 2 750.75 02/24/2014 0:10 1.5679926 (3956.46) 3610.00 1.92 2 751.75 02l24l2014 0:10 1 ($610.00) $610.00 1.22 2 652.21 02/24/2014 2:23 100.4606941 (357.965.62) 3577.00 115.94 2 663.51 02/24/2014 2:23 11.30016176 (36,520.19) . - 3577.00 13.05 2 870.99 02l24/2014 2:24 7.47710656 $577.00 8.63 . 2 675.62 02/24/2014 2:49 - 4.6356691 . 3577.00 5.35 2 693.72 02/24/2014 2:50 16.10200676 (310,444.90) 3577.00 20.69 2 951.75 02/24/2014 2:53 56.02426172 3577.00 66.97 2 1051.75 02/24/2014 6:05 100 (356.300.00) 3563.00 112.6 2 1059.15 02l24/2014 13:36 7.4 - $575.00 8.51 2 1039.67 02/25/2014 3:17 49.4739 39,444.66 3465.00 16.69 2 1033.6 02/25/2014 3:17 ?6.07897 32,940.30 3465.00 5.9 2 1032.43 02/25/2014 3:16 4.16766 3566.32 3405.00 1.1 2 1027.43 02/25/2014 3:16 -5 $2,425.00 3405.00 4.65 2 1023.9 02/25/2014 3:19 4 3.5234 $1,706.65 3465.00 3.42 2 1017.26 02/25/2014 3:20 662734 3321426 3465.00 6.43 2 959.15 02/25/2014 3:20 -58.1287 326,192.41 3465.00 56.39 2 946.15 02/25/2014 4:09 4 2.9945 36,497.23 3500.00 13 15-mj-7O 70-MAG DocUmentl Filedos/25/1g Page81 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis 3- lj?a?ri?m? 75.7 :1999 '7 "j P. ""1759599365059? imimram 1 31993970150999 359501511 -- 19.017155999113919; . .1'101015996119 . 1911619999J BEE- .. 2 939.33 02/25/2014 4:09 9921 - 9500.00 9.93 2 935.33 02/25/2014 4:09 - 0.0093 9500.00 0.01 2 927.57 02/25/2014 4:09 9.7549 9500.00 9.79 2 922.57 02/25/2014 4:09 -5 $2500.00 9500.00 5 2 901.97 02/25/2014 4:10 20.9011 910.450.59 9500.00 20.91 2 993.19 02/25/2014 4:10 9.49191 $4,240.99 9500.00 9.49 2 992.94 02/25/2014 4:10 -0.25 9125.00 9500.00 0.25 2 891.44 02/25/2014 4:10 -1.50306 $751.53 $500.00 1.51 2 990.44 02/25/2014 4:10 -1 9500.00 9500.00 1 2 990.44 02/25/2014 4:10 -10 $5,000.00 $500.00 10 2 975.02 02/25/2014 4:11 4.4129 92.20940 3500.00 4.42 2 975.95 02/25/2014 4:11 -0071 935.50 3500.00 0.09 2 995.95 02/25/2014 4:11 -10 $5,000.00 $500.00 10 2 959.15 02/25/2014 4:11 9.90375 $3,401.97 9500.00 5.91 2 990.97 02/25/2014 4:33 . 21 .92547917 9470.00 20.52 2 881.65 02/25/2014 4:40 0.6759183 ($317.68) $470.00 0.64 2 905.45 02/25/2014 4:53 23.79474311 $470.00 22.37 2 924.98 02/25/2014 4:53 19.53418 $470.00 18.37 2 944.72 02/25/2014 4:53 19.74069 $470.00 18.56 2 991.95 02/25/2014 4:53 19.92999042 3470.00 15.92 2 942.15 02/25/2014 15:09 49.5003 $10,140.19 3520.00 20.29 2 942.09 02/25/2014 15:09 -0055 934.32 9520.00 0.07 2 935.94 02/25/2014 15:09 9.13773 $3,191.92 3520.00 5.39 2 913 02/25/2014 15:12 22.9473 $11,932.51 9520.00 23.97 2 911.7 02/25/2014 15:15 -129379 9972.77 3520.00 1.35 2 911.49 02/25/201415:15 -02111 9109.77 9520.00 0.22 2 999.97 02/25/2014 15:15 42.922 $9593.44 9520.00 13.13 2 825.84 0212512014 15:16 -73.0316 $37.976.42 $520.00 75.96 2 925.99 02/25/2014 15:19 0.1592 991.22 9520.00 0.17 2 825.68 02/25/2014 15:16 -0.00612 $3.18 $520.00 0.01 2 825.67 02125I2014 15:17 -0.00701 $3.65 $520.00 0.01 2 925.12 02/25/2014 15:17 -054715 3294.52 9520.00 0.57 2 761.65 02/25/2014 15:44 -63.4737 . $33,006.32 6520.00 66.02 2 605.06 02/26/2014 16:04 -156.592 $90.510.04 6578.00 181.03 2 904.09 02/29/2014 19:05 -1 $579.00 3579.00 1.19 2 599.21 02/29/2014 19:05 4.9459 92,900.97 9579.00 5.91 2 599.21 02/29/2014 19:05 -1 $579.00 9579.00 1.19 2 597.21 02/29/2014 19:05 -1 9579.00 3579.00 1.19 2 597.14 02/25/2014 15:05 40.0715 95.92133 9579.00 11.95 2 595.91 02/29/2014 15:05 -023229 9134.25 9579.00 0.27 2 599.49 02/29/2014 15:05 -o.44292 $259.01 9579.00 0.52 2 585.46 02/26/2014 16:05 -1 $578.00 $578.00 1.16 2 594.49 02/29/2014 19:05 -1 9579.00 9579.00 1.19 2 584.16 02l26/2014 16:05 -0.3022 $174.67 $578.00 0.35 2 575.16 02l26/2014 16:05 -9.00282 $5,203.63 $578.00 10.41 2 574.19 02/29/2014 19:05 ?1 9579.00 9579.00 1.19 2 574.03 02l26/2014 16:05 . -0.125 $72.25 $578.00 0.15 2 573.53 02/29/2014 15:05 -0.5 9299.00 9579.00 0.59 2 594.59 02/29/2014 19:05 9.95303 95,117.05 9579.00 . 10.24 2 593.99 02/29/2014 19:05 -1 9579.00 9579.00 1.15 15-mj-7O 70-MAG Documentl FiledOB/ZS/g Page82 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis 'ff '1 ., i 1 Busm?t??r?ga?l?? I. "f . 57056:. 01656176} B: .jff?'mg4JL 116%me $161631. -. 2 563.6 02/26/2014 16:05 ~0.0833 $46.15 $576.00 0.1 2 561.65 02/26/2014 16:05 -1 .94939 $1,126.75 $576.00 2.26 2 561.75 02/26/2014 14:37 0.1 ($56.20) $562.00 0.12 2 761.65 02/26/2014 20:30 199.9 $562.00 224.69 2 561.65 03/03/2014 6:20 .200 $116,000.00 $590.00 236 2 506.52 03/03/2014 16:37 -53.1318 $36,395.30 $665.00 72.6 2 503.79 03/03/2014 16:36 -4.72777 $3,236.52 . $665.00 6.46 2 497.34 03/03/2014 16:36 6.44594 - $4,415.47 $665.00 6.64 2 495.16 03/03/2014 16:36 ~2.18518 $1,496.65 $665.00 3 2 477.09 03/03/2014 16:36 -1 6.0692 $12,377.40 $665.00 24.76 2 467.09 03/03/2014 16:36 -10 $6,650.00 $665.00 13.7 2 461.65 03/03/2014 18:38 -5.44008 $3,726.45 $665.00 7.46 2 462.14 03/03/2014 20:00 0.48940985 ($320.40) $654.66 0.65 2 462.2 03/03/2014 20:00 . 0.061 ($39.96) $655.00 0.06 2 470.72 03/03/2014 20:00 6.51964165 $655.00 11.17 2 495.63 03/03/2014 20:01 24.9067032 $655.00 32.63 2 496.63 03/03/2014 20:01 1 ($655.00) $655.00 1.31 2 497.63 03/03/2014 20:01 1 ($655.00) $655.00 1.31 2 497.66 03/03/2014 20:01 0.05 ($32.75) $655.00 0.07 2 497.74 03/03/2014 20:01 0.061 ($39.96) $655.00 0.06 2 507.91 03/03/2014 20:01 10.17 $655.00 13.33 2 507.96 03/03/2014 20:01 0.0516692 ($33.66) $655.00 0.07 2 557.46 . 03/03/2014 20:01 49.49733426 $655.00 64.65 2 557.94 03/03/2014 20:01 0.46 ($314.40) $655.00 0.63 2 556 03/03/2014 20:01 0.061 ($39.96) $655.00 0.06 2 560.01 03/03/2014 20:01 2.01096604 . $655.00 2.64 2 560.51 03/03/2014 20:01 0.4995 ($627.17) $655.00 0.66 2 560.56 03/03/2014 20:01 0.05 ($32.75) $655.00 0.07 2 566.65 03/03/2014 20:05 6.0917556 $655.00 7.99 2 566.61 03/03/2014 22:00 -0.03606 $24.19 $671.00 0.05 2 563.66 03/03/2014 22:00 -2.7537 $1,647.73 $671.00 3.7 2 563.76 03/03/2014 22:00 -0.08 $53.66 $671.00 0.11 2 554.66 03/03/2014 22:02 9.10326 $6,106.30 . 6671.00 12.22 2 560.45 03/03/2014 22:06 2577536532 $663.00 34.16 2 563.46 03/03/2014 22:06 3.02539 $663.00 4.02 2 673.11 03/03/2014 22:21 69.63792661 6663.00 116.66 2 719.55 03/03/2014 22:42 46.43247962 $663.00 61.57 2 719.62 03/03/2014 22:42 0.07766161 ($51.64) $663.00 0.11 . 2 664.11 03/03/2014 22:59 -35.5133 $23,629.45 $671.00 47.66 2 631.25 03/03/2014 23:19 -52.8597 $35,466.66 $671.00 70.94 2 626.24 03/03/2014 23:20 -5.00962 $3,361.46 $671.00 6.73 2 624.35 03/03/2014 23:20 -1.69017 $1,266.30 $671.00 2.54 2 623.07 03/03/2014 23:20 -1 .26577 $662.75 $671.00 1.73 2 613.04 03/03/2014 23:20 -10.0306 $6,730.55 $671.00 13.47 2 611.02 03/03/2014 23:20 .201293 $1,350.66 - $671.00 2.71 2 611.01 03/03/2014 23:20 . 001022 $6.66 $671.00 0.02 2 606.01 03/03/2014 23:20 -5 $3,355.00 $671.00 6.71 2 604.66 03/03/2014 23:21 -1.1478 $770.17 $671.00 1.55 2 602.66 03/03/2014 23:21 -2 $1,342.00 9 $671.00 2.69 2 600.66 03/03/2014 23:21 -2 $1,342.00 $671.00 2.69 Appendix CARL FORCE BitStamp Account Analysis 15-mj-7O 70-MAG Documentl FiledOB/ZS/ljx Page83 of 95 Case3 I A iifipg?iysigma/J lmmawmaj 1 . 1- lui?s?fn?i'a?iz?? 2 600.69 03/03/2014 23:21 -0.17178 $671.00 2? 598.41 03/03/2014 23:21 -2.27933 $671.00 2 598.39 03/03/2014 23:21 ?0.02657 $671.00. 2 598.09 03/03/2014 23:21 ?0.3 $671.00 2 596.02 03/03/2014 23:22 -2.06744 $671.00 2 595.29 03/03/2014 23:22 -0.72921 $671.00 0.98 2 574.51 03/03/2014 23:22 -20.7773 $13,941.56 $671.00 27.89 2 559.29 03/0312014 23:23 -15.2196 $10,212.32 $671.00 20.43 2 558.36 03/03/2014 23:23 -0.93 $624.03 $671.00 1.25 2 33.1 .6 03/03/2014 23:24 -226.766 $152,159.72 $671.00 304.32 2 365 03/04/2014 6:54 33.40457579 (522.147.23) $663.00 44.3 2 375.85 03l04/2014 6:55 10.84593327 $663.00 14.3 2 386.3 03l04/2014 6:55 10.455 . $663.00 13.87 2 413.75 03/04/2014 6:55 27.44763 $663.00 36.4 2 423.2 03/04/2014 6:59 9.44973704 $663.00 12.54 2 429.98 03/04/2014 6:59 6.783085 $663.00 9 2 566.65 03l04/2014 19:43 136.6649935 ($90.608.89) $663.00 181.22 2 568.58 03l04/2014 21 :00 1.92662528 $668.00 2.58 2 569.65 03/04/2014 21:03 1.07337472 ($717.01) $668.00 1.44 2 566.53 03/06/2014 3:08 -3.1 191 1 $2,105.40 $675.00 4.22 2 564.32 03/06/2014 3:09 -2.21425 $1,494.62 $675.00 2.99 2 562.1 03/06/2014 3:11 -2.21336 $1,494.02 $675.00 2.99 2 531.51 03/06/2014 3:22 ~30.5885 $20,647.22 $675.00 41.3 2 4.7 2.7 03/06/2014 3:38 - -58.8174 $39,701.77 $675.00 79.41 2 469 03/06/2014 3:39 -3.69224 $2,492.26 $675.00 4.99 2 469.36 14:08 0.35883304 ($235.04) $655.00 0.48 2 469.72 03/06/2014 14:08 0.35987 ($235.71) $655.00 0.48 2 481.02 03/06l2014 14:08 1 1.30056 $655.00 14.81 2 490.06 03/06/2014 14:08 9.034538 $655.00 1 1.84 2 493.12 03/06/2014 14:08 3.0645445 $655.00 4.02 2 572 03/06/2014 14:21 78.88165446 - . - $655.00 103.34 2 737 03/07/2014 8:43 165 ($107.250.00) $650.00 214.5 2 673.35 03/07/2014 18:45 -63.6571 $39,467.39 $620.00 78.94 2 672.64 03/07/2014 18:47 -0.70736 $438.56 $620.00 0.88 2 671.99 03/07/2014 18:47 -0.65101 $403.62 $620.00 0.81 2 671.09 03/07/2014. 18:48 -0.89587 $555.44 $620.00 1.12 2 670.47 03/07/2014 18:48 -0.61787 $383.08 . $620.00 0.77 2 668.71 03/07/2014 18:48 -1.76484 $1,094.20 $620.00 2.19 2 664.28 03/07/2014 18:48 -4.43284 - $2,748.36 $620.00 5.5 2 663.41 03/07/2014 18:48 -0.86998 $539.39 $620.00 1.08 2 655.36 03/07/2014 18:52 -8.04551 $4.988.22 $620.00 9.98 2 653.37 03/07/2014 18:52 -1.99 $1233.80 $620.00 2.47 2 653.36 03/07/2014 18:52 -0.01 $6.20 $620.00 0.02 2 653.28 03l07/2014 18:52 -0.08 $49.60 $620.00 0.1 2 653.25 03/07/2014 18:52 -0.03 $18.60 $620.00 0.04 2 639.09 03/07/2014 18:54 -14.1666 $8,783.29 $620.00 17.57 2 637 03/07/2014 18:57 -2.08104 $1 .290.24 $620.00 2.59 2 525.56 03/07/2014 20:06 ?111.441 $70,764.83 $635.00 141.53 2 521.68 03/07/2014 20:06 ~3.87869 $2,462.97 $635.00 4.93 2 516.65 03/07/2014 20:06 -5.03 $3,194.05 $635.00 6.39 15-mj-7O 70-MAG Documentl Page84 01 95 Case3 Appendix CARL FORCE BitStamp Account Analysis 7 393111.99 Em I if If13.111636661136679 60161561,? 30171116320116] 53513 . ?14.51631 2 506.05 03/07/2014 20:06 - -10.8 $6,731.00 3635.00 13.47 2 505.51 03/07/2014 20:06 -0.54866 $346.40 $635.00 0.7 2 503.54 03/07/2014 20:06 -1 .96666 $1,250.11 3635.00 2.51 2 503.1 03/07/2014 20:06 -0.43843 $276.40 $635.00 0.56 2 467.2 03/07/2014 20:06 .159 $10,096.50 $635.00 20.2 2 476.96 03/07/2014 20:06 40237 $6,500.50 3635.00 13.01 2 472.99 03/07/2014 20:06 3.96694 $2,520.26 $635.00 5.05 2 471.05 03/07/2014 20:09 ?1 .94123 $1,232.66 $635.00 - 2.47 2 466.97 03/07/2014 20:09 -4.08387 $2,593.26 $635.00 5.19 2 445.13 03/07/2014 20:09 ~21.84 $13,868.37 3635.00 27.74 2 440.02 03/07/2014 20:09 5.10417 $3,241.15 3635.00 6.49 2 437 03/07/2014 20:09 -3.0197 $1,917.51 $635.00 3.64 2 505.19 03/06/2014 16:02 66.16324273 $609.00 63.05 2 506.07 03/06/2014 16:03 0.66347609 ($536.04) $609.00 1.06 2 540 03/06/2014 16:04 33.93327916 $609.00 41.34 2 410 03/11/2014 21 :16 -130 $63,200.00 $640.00 166.4 2 508.48 03/14/2014 19:38 98.47858485 $627.00 123.5 2 543 03/14/2014 19:43 34.52141515 $627.00 43.29 2 446.74 03/17/2014 16:45 -96.2642 $60,453.90 $626.00 120.91 2 443 03/17/2014 16:46 -3.73583 $2,346.10 $626.00 4.7 2 509.52 03/16/2014 4:46 66.51350226 $617.00 62.06 2 544 03/18/2014 4:46 34.46649772 $617.00 42.56 2 576 2:29 31 .99638736 $600.00 38.4 2 649 03/20/2014 2:31 73.00361264 3600.00 67.61 2 590.54 03/21/2014 6:30 -58.4649 $34,065.01 $563.00 66.16 2 565.13 03/21/2014 6:30 -5.4078 $3,152.63 $563.00 6.31 2 567.75 03/21/2014 6:31 -17.383 $10,134.29 3563.00 20.27 2 567.25 03/21/2014 6:31 .0501 $292.06 $563.00 0.59 2 566.66 03/21/2014 6:31 -057 $332.31 3563.00 0.67 2 566.16 03/21/2014 6:31 -0501 $292.06 $563.00 0.59 2 563.16 03/21/2014 6:32 -3 $1,749.00 $583.00 3.5 2 559.29 03/21/2014 6:32 -3.89 $2,267.67 3563.00 4.54 2 556.79 03/21/2014 6:32 -0501 $292.06 3563.00 0.59 2 558.28 03l21l2014 6:33 0501 $292.08 $583.00 0.59 2 557.76 03/21/2014 6:33 -05 $291.50 $583.00 0.59 2 557.26 03/21/2014 6:33 - -0501 $292.06 $563.00 0.59 2 556.92 03/21/2014 6:34 -0.36 $209.66 $583.00 0.42 2 553.64 03/21/2014 6:36 -3.08318 $1,767.49 $563.00 3.6 2 513.97 03/21/2014 6:39 -39.6731 $23,246.03 $583.00 46.5 2 513.47 03/21/2014 6:39 -0501 $292.06 $583.00 0.59 2 507.52 03l21l2014 6:40 -5.94646 $3,486.79 $583.00 6.94 2 507.02 03/21/2014 6:40 0501 $292.06 $563.00 0.59 2 502.26 03/21/2014 6:40 -4.74182 $2,764.46 $563.00 5.53 2 501.76 03/21/2014 6:41 -0501 $292.06 $563.00 0.59 2 500.78 03l21l2014 6:41 -1 $583.00 $583.00 1.17 2 349 03/21/2014 6:41 -151.772 $66,463.04 3563.00 176.97 2 345.6 03/21/2014 6:42 -3.20384 $1690.27 3590.00 3.79 2 340.9 03/21/2014 6:43 4.90426 $2,693.52 $590.00 5.79 2 339.71 03/21/2014 6:43 4.16951 $701.61 3560.00 1.41 2 339.11 03/21/2014 6:43 -0.6 $354.00 $590.00 0.71 - Appendix CARL FORCE BitSlamp Account Analysis -MAG Documentl Page85 of 95 A -7037O 15-mj Case3 16651959191931) 71.7fm? 116555561 33515115034 5553555555.] Emmi 61561951011 19015115551an - 5530311059. - 2 149 03/21/2014 6:44 490.102 . $112.160.41 $590.00 224.33 2 366.55 03/21/2014 11:00 237.5456064 3572.00 271.75 2 439.95 03/21/2014 11:00 53.39565233 (330,542.43) 3572.00 61.09 2 441.35 03/21/2014 11:00 1.41311935 (3611.16) 3572.00 1.63 2 444.92 03/21/2014 11:00 3.55337364 (32,032.53) 3572.00 4.07 2 449 03/21/2014 11:00 4.06704255 (32,337.79) 3572.00 4.63 2 451.01 03/21/2014 11:57 2.00575307 (31,133.25) 3555.00 2.27 2 500.35 03/21/2014 11:57 49.34195407 (327,676.21) 3555.00 55.76 2 467.51 03/21/2014 12:17 -32.8425 319,046.65 3560.00 36.1 2 454.15 03/21/2014 12:17 -3.35884 31,946.13 3560.00 3.9 2 422.34 03/21/2014 12:17 -41.8095 . $24,249.52 $580.00 48.5 2 419.15 03/21/2014 12:16 319011 31,650.27 3530.00 3.71 2 403.53 03/21/2014 12:16 45.617 $9,057.35 $580.00 16.12 2 402.53 03/21/2014 12:18 -1.0075 $584.35 $580.00 1.17 2 300.35 03/21/2014 12:20 402.175 359,251.22 $580.00 116.53 2 504.35 03/21/2014 20:26 204 A 3570.00 232.56 2 804.35 03/2212014 9:35 300 $560.00 336 2 790.04 03/22/2014 17:05 44.3136 36,056.55 3563.00 15.12 2 704.35 03/22/2014 20:49 -85.6864 346,241.45 3563.00 95.49 2 . 573.53 0312212014 22:07 430.317 374,565.55 3570.00 149.14 2 555.92 03/22/2014 22:06 5.51533 33,771.31 3570.00 7.55 2 404.35 03/24/2014 17:54 462.567 392,653.14 3570.00 165.33 2 426.11 03/24/2014 21 :47 23.76314511 3560.00 27.57 2 426.34 03/24/2014 21 :46 0.23 (3133.40) 3560.00 0.27 2 423.5 03/24/2014 21 :48 0.15238594 ($88.38) 3560.00 0.16 2 426.62 03/24/2014 21 :48 0.12599994 (373.06) $580.00 0.15 2 423.37 03/24/2014 21 :43 0.25 (3145.00) 3560.00 0.29 2 429.12 03/24/2014 21 :48 0.25 ($145.00) $580.00 0.29 2 429.37 03/24/2014 21 :48 0.25 (3145.00) 3560.00 0.29 2 429.39 03/24/2014 21:46 0.01373557 (37.97) 3560.00 0.02 2 429.64 03/24/2014 21:46 0.25 (3145.00) $580.00 0.29 2 433.9 03/24/2014 21:46 4.2505 (32,471.09) $580.00 4.95 2 434.15 03/24/2014 21 :48 0.25 (3145.00) 3560.00 0.29 2 434.4 03/24l2014 21 :49 0.25 ($145.00) $580.00 0.29 2 434.65 03/24/2014 21 :49 0.25 (3145.00) 3530.00 0.29 2 441.9 03/24/2014 21 :49 7.25337424 $580.00 8,42 2 442.15 03/24/2014 21:49 0.25 (3145.00) 3560.00 0.29 2 442.4 03/24/2014 21:49 0.25 (3145.00) 3560.00 0.29 2 442.79 03/24/2014 21:49 0.3351923 (3223.41) 3530.00 0.45 2 442.3 03/24/2014 21:49 0.01761793 (310.33) 3560.00 0.03 2 442.62 03/24/2014 21:49 0.012 (36.96) 3560.00 0.02 2 495.59 03/24/2014 21:50 53.67564199 (331,247.67) 3560.00 62.5 2 504.35 03/24/2014 21 :50 7.66020588 $580.00 8.89 2 437.15 03/24/2014 22:37 310,142.59 3590.00 20.29 2 425.13 03l24/2014 22:38 $36,598.66 $590.00 73.2 2 404.35 03/24/2014 22:39 312,256.76 3590.00 24.52 2 407.77 03/25/2014 15:37 3.41905509 (31,955.96) 3575.00 3.94 2 502.37 03/25/2014 15:36 94.59548607 (354,392.40) 3575.00 106.79 2 504.62 03/25/2014 15:36 2.45782832 3575.00 2.63 2 506.35 03/25/2014 15:36 1.52753052 ($878.39) 3575.00 1.76 15-mj-7O 70-MAG Documentl Filed03/25/15 Page86 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis 7 7, i' Eli/"1"? "f 15"" A . ?1 mgm?g??j Ii :7 7 .mz'feaj .1 13311685? Ts'itd Email? L?m?satml EE 12.. 3316:?; 2 504.95 03l26l2014 17:24 -1.4 $821.80 $587.00 1.65 2 504.78 03/26/2014 17:37 -0.16961 $99.56 $587.00 0.2 2 504.58 03126/2014 17:45 -0.2 $117.40 $587.00 0.24 2 504.46 03I26I2014 17:46 -0.11871 $69.68 $587.00 0.14 2 504.18 03l26l2014 17:47 -0.2862 $168.00 $587.00 0.34 2 502.37 03I26I2014 17:48 -1 .805 $1 .059.54 $587.00 2.12 2 502.29 03l26l2014 17:53 -0.08239 $48.36 $587.00 0.1 2 489.82 03I26I2014 17:59 -12.4662 $7,317.67 $587.00 14.64 2 489.36 17:59 -0.4653 $273.13 $587.00 0.55 2 489.16 03l26l2014 17:59 -0.2 $117.40 $587.00 0.24 2 487.54 03l26/2014 17:59 -1.619 $950.35 $587.00 1.91 2 486.86 03I26I2014 18:00 -0.67551 $396.52 $587.00 0.8 2 486.53 03/26/2014 19:04 -0.33713 $197.89 $587.00 0.4 2 486.47 14:49 -0.06 $30.90 $515.00 0.07 2 486.4 03l27/2014 14:49 -0.07 $36.05 $515.00 0.08 2 486.33 (13/27/2014 14:49 -0.07 $36.05 $515.00 0.08 2 486.25 03l27/2014 14:49 -0.08 $41.20 $515.00 0.09 2 486.17 03l27/2014 14:49 -0.08 $41.20 $515.00 0.09 2 486.09 03/27/2014 14:49 -0.08 $41.20 $515.00 0.09 2 486.01 03/27/2014 14:49 -0.08 $41.20 $515.00 0.09 2 485.92 03l27/2014 14:49 -0.09 $46.35 $515.00 0.1 2 485.83 03l27/2014 14:49 -0.09 $46.35 $515.00 0.1 2 485.73 03l27/2014 14:49 -0.1 $51.50 $515.00 0.1 1 2 485.63 03/27/2014 14:49 -0.1 $51.50 $515.00 0.11 2 485.42 14:49 -0.20878 $107.52 $515.00 0.22 2 484.72 14:49 -0.7 $360.50 $515.00 0.73 2 484.65 03l27l2014 14:49 -0.07 $36.05 $515.00 0.08 2 484.58 03/27/2014 14:49 -0.07 $36.05 $515.00 0.08 2 484.49 14:49 -0.09 $46.35 $515.00 0.1 2 484.39 14:49 -0.1 $51.50 $515.00 0.11 2 484.29 14:49 -0.1 $51.50 $515.00 0.11 2 483.29 03l27/2014 14:50 -1.0002 $515.10 $515.00 1.04 2 483.22 03127/2014 14:50 -0.06841 $35.23 $515.00 0.08 2 482.24 03/27/2014 14:50 -0.9743 $501.76 $515.00 1.01 2 474.57 14:52 -7.67574 $3,953.01 $515.00 7.91 2 463.8 14:52 -10.7691 $5,546.09 $515.00 11.1 2 460.33 14:52 -3.47101 $1,787.57 $515.00 3.58 2 451.32 03l27/2014 14:53 -9.00764 $4,638.93 $515.00 9.28 2 450.4 03l27/2014 14:53 -0.92208 $474.87 $515.00 0.95 2 450.3 03/27/2014 14:53 -0.1 $51.50 $515.00 0.11 2 443.05 03l27/2014 14553 -7.24786 $3,732.65 $515.00 7.47 2 442.95 14:53 -0.1 $51.50 $515.00 0.11 2 386.53 03/27/2014 14:54 -56.4249 $29,058.81 $515.00 58.12 2 377.74 -8.79 $4,623.54 $526.00 9.25 2 286.53 15:12 -91.21 $47,976.46 $526.00 95.96 2 388.53 03I27I2014 15:37 102 3516.00 105.27 2 490.53 03/27/2014 23:02 102 $505.00 103.02 2 490.45 03/27/2014 23:59 -0.08086 $38.41 $475.00 0.08 2 490.08 23:59 -0.36909 $175.32 $475.00 0.36 2 486.93 03l27/2014 23:59 -3.14594 $1 ,494.32 $475.00 2.99 -MAG Documentl Filed03/25/1/5?Page87of95 156140;; Case3 Appendix CARL FORCE BitStamp Account Analysis @3112? '1 . j" T1 I 22130164526766161100611616161 30716563131 1.16.05? "66111311163. . 1601616116911 BEE- - 1 2 466.9 03/27/2014 23:59 002854 $475.00 0.03 2 479.7 03/27/2014 23:59 720714 $475.00 6.65 2 479.56 03/27/2014 23:59 013191 $475.00 0.13 2 479.44 03/27/2014 23:59 -0.12598 $475.00 0.12 2 479.26 03/27/2014 23:59 016022 $475.00 0.16 2 479.23 03/28/2014 0:00 -005 $475.00 0.05 2 469.4- 03/26/2014 0:00 -9.82526 5475.00 9.34 2 469.22 03/26/2014 0:00 ?0.1828 $475.00 0.16 2 466.97 03/26/2014 0:00 7 -02525 $475.00 0.24 2 466.67 03/26/2014 0:00 03 $475.00 0.29 2 467.73 03/28/2014 0:00 -0.93912 $475.00 0.9 2 465.73 03/26/2014 0:00 -2 $475.00 1.9 2 457.23 03/28l2014 0:00 -8.49552 $475.00 8.08 2 456.5 03/28/2014 0:00 -0.73457 $475.00 0.7 2 455.5 03/26/2014 0:00 -1 $475.00 0.95 2 454.5 03/26/2014 0:00 -1 6475.00 0.95 2 450.06 03/28/2014 0:00 -4.44055 $475.00 4.22 2 449.06 03/26/2014 0:00 -1.0002 6475.00 0.96 2 393.06 03/28/2014 0:00 -56 $26,600.00 $475.00 . 53.2 2 390.53 03/26/2014 0:00 .252979 $1,201.65 $475.00 2.41 2 402.33 03/30/2014 12:46 11.60045309 $464.00 10.96 2 412.33 03/30/2014 12:46 10 $464.00 9.26 2 412.77 03l30l2014 12:46 0.4477 ($207.73) $464.00 0.42 2 415.27 03/30/2014 12:46 2.5 6464.00 2.32 2 456.16 03/30/2014 12:47 40.90561 6464.00 37.97 2 461.17 03/30/2014 12:47 4.9651 . 3464.00 4.63 2 492.53 03/30/2014 12:48 . 31.36093691 $464.00 29.11 2 545.26 03/30/2014 16:23 52.73261336 $440.00 46.41 2 549.6 03/30/2014 16:24 4.33656305 6440.00 3.62 2 574.6 03/30/2014 16:25 25 1,000.00) $440.00 22 2 596.26 03/30/2014 16:25 23.66167695 (31042003) 3440.00 20.65 2 596.62 03/30/2014 16:25 0.54 ($237.60) $440.00 0.46 2 602.53 03/30/201416:25 3.70692664 $440.00 3.27 2 601.66 03/30/2014 17:08 -0.87011 $393.29 $452.00 0.79 2 596.17 03/30/2014 17:06 -3.49 $1,577.46 3452.00 3.16 2 591.56 03/30/2014 17:06 -6.60677 $2,966.26 $452.00 5.96 2 563.73 03/30/2014 17:20 -7.82765 $3,536.10 $452.00 7.06 2 516.72 03/30/2014 17:22 -65.01 $29,364.52 3452.00 56.77 2 510.34 03/30/2014 17:23 ~8.38071 $3,766.06 3452.00 7.56 2 504.99 03/30/2014 17:23 . -5.34869 $2.417.61 $452.00 4.64 2 504.97 03/30/2014 17:23 002522 $11.40 - $452.00 0.03 2 492.53 03/30/2014 17:24 -12.4406 . 1 $5,623.26 $452.00 11.25 2 392.53 04/01/2014 6:40 -100 $47,000.00 $470.00 94 2 400.15 04/02/2014 14:55 7.62726645 $455.00 6.95 2 491.32 04l02/2014 14:55 91.16453641 (341.479.86) $455.00 82.96 2 494.92 04/02/2014 14:55 3.6 .638.00) $455.00 3.26 2 496.92 04/02/2014 14:55 2 ($910.00) 6455.00 1.62 2 497.53 04/02/2014 14:55 0.60617514 ($276.72) $455.00 0.56 2 464.02 04/05/2014 23:16 -1 3.5062 $6,206.11 $459.50 12.42 2 463.72 04/05/2014 23:19 -0.3 . $137.65 3459.50 0.26 15-mj-7O 70-MAG Documentl Filed03/25/1?; Page88 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis 1 -. 7 ?3.35.1:1; l" . 7" '1 7" ?13: _1 5.3913053: - 331513553115! 3310133131333 0333511101] 13905505353333). .. 1533335 031310959001; . 1-- I 2 - 483.12 04/05/2014 23:19 -0.6 $275.70 $459.50 0.56 2 480.62 04/05/2014 23:19 ?2.5 $1,148.75 $459.50 2.3 2 430.35 0410512014 23:19 .0.27 3124.03 3459.50 0.25 2 476.94 04/05/2014 23225 -3.41326 $1,568.39 $459.50 3.14 2 422.94 04/05/2014?23225 -54 $24,813.00 $459.50 49.63 2 413.44 0410512014 23:25 4.49349 32,054.73 3459.50 4.13 2 418.34 04/05/2014 23:26 -0.1 $45.95 $459.50 0.1 2 418.09 04/05/2014 23:26 -0.25 $1 14.88 $459.50 0.23 2 417.84 04/05/2014 23:26 -0.25 $114.88 $459.50 0.23 2 417.59 23:26 ?0.25 $1 14.88 $459.50 0.23 2 417.39 04/05/2014 23:26 -0.2 $91.90 $459.50 0.19 2 359.31 0410512014 23:23 43.0335 322094.39 3459.50 44.19 2 359.05 0410512014 23:25 .025 3114.35 3459.50 0.23 2 353.95 0410512014 23:25 -5.1 32,343.45 3459.50 4.59 2 353.71 0410512014 23:27 -0.25 3114.33 3459.50 0.23 2 353.51 0410512014 23:27 .0.1 345.95 3459.50 0.1 2 363.26 04I05I201 4 23:27 -0.35 $160.62 $459.50 0.33 2 353.01 0410512014 23:27 -025 3114.33 3459.50 0.23 2 352.59 0410512014 23:27 -032 3147.04 3459.50 0.3 2 342.59 0410512014 23:23 .20 39.19000 3459.50 13.33 2 342.54 0410512014 23:23 004903 322.53 3459.50 0.05 2 342.59 04105120142323 -005 122.93 3459.50 0.05 2 310 0410512014 23:29 32.5371 314,973.73 3459.50 29.95 2 333.32 04107120141533 23.32011113 (310,400.77) 3443.00 20.31 2 339.29 04107120141541 5.9334107 (32.35933) 3443.00 5.32 2 339.55 0410712014 15:42 0.25417274 (3117.32) 3443.00 0.24 2 341.12 0410712014 13:42 1.559 (5599.77) 3445.00 1.4 2 341.17 04/07/2014 16:43 0.05 ($22.30) $446.00 0.05 2 341.22 0410712014 15:43 0.05 (322.30) 3443.00 0.05 2 343.43 0410712014 15:43 2.21215 (3933.32) 3443.00 1.93 2 353.67 04/07/2014 16:43 10.24029149 $446.00 9.14 2 355.45 0410712014 13:44 2.775 31,237.35) 3445.00 2.43 2 355.49 0410712014 13:44 0.04 317.34) 3445.00 0.04 2 356.53 16:44 0.04 $17.84) $446.00 0.04 2 353.53 04107120141344 0.05 322.30) 3443.00 0.05 2 356.63 04/07/2014 16:44 0.05 $22.30) $446.00 0.05 2 355.53 0410712014 13:44 0.05 (322.30) 3445.00 0.05 2 355.33 0410712014 15:49 0.005 (52.23) 3445.00 0.01 2 357.79 0410712014 13:51 1.10515 (3493.34) 3445.00 0.99 2 353.53 0410712014 13:53 0.341 (3375.09) 3445.00 0.75 2 483.56 04/07/2014 16:56 124.9277773 $446.00 11 1.44 2 488.69 04/07/2014 16:56 5.13083658 $446.00 4.58 2 495.36 04/07/2014 16:56 6.67204343 $446.00 5.96 2 510 04/09/2014 12:14 14.64305666 $446.00 13.07 2 539.7 0411 0/2014 3:22 29.69973285 $429.00 25.49 2 554.74 04/10/2014 3:22 15.03332 $429.00 12.9 2 569.71 04/10/2014 3:22 14.975 $429.00 12.85 2 539.3 0411012014 3:22 0.092 (339.47) 3429.00 0.03 2 577.3 04/10/2014 3:22 7.5 3429.00 6.44 2 604.34 04/10/2014 3:23 27.03374474 ($11 ,597.48) $429.00 23.2 15-mj-7O 70-MAG Documentl Filed03/25/}i\ Page89 of 95 Case3 Appendix CARL FORCE BitStamp Account Analysis 77?" 7 7 71.3.3136?" 117:": . '7 f; ?1 7 "1 1-1 'aane?d 2.211661566111761. mearawu Enamwh?se 576666613 Li?nr?hESTe?iB?Iw . . .f 5 66662666146212. 2. - 2 605.15 04/10/2014 3:23 0.61 (6347.49) 6429.00 0.7 2 615 04/10/2014 3:23 9.65620241 (64.226.31) $429.00 6.46 2 515 04/10/2014 15:32 -100 $39,200.00 6392.00 76.4 2 562.1 04/10/2014 22:01 67.0995766 (62556494) $381.00 . 51.13 2 597.11 04/10/2014 22:01 15.01 (65,716.61) 6361.00 11.44 2 597.27 04/10/2014 22:01 0.159344 (660.71) 6361.00 0.13 2 597.75 04/10/2014 22:01 0.476 (6161.36) 6361.00 0.37 2 615 04/10/2014 22:01 17.2550772 (66,574.16) 6361.00 13.15 2 616.25 04/11/2014 0:27 3.24607609 .136.83) 6350.00 2.26 2 619.25 04/11/2014 0:27 1 (6350.00) 6350.00 0.7 2 620.87 04/11/2014 0:28 1.61801644 ($566.31) $350.00 1.14 2 623.03 04/11/2014 0:28 2.1570667 (6754.97) 6350.00 1.51 2 623.5 04/11/2014 0:26 0.46957 (6164.35) 6350.00 0.33 2 647.4 04/11/2014 0:30 23.90761196 (66,367.66) 6350.00 16.74 2 719.4 04/11/2014 0:30 . 72 $350.00 50.4 2 724.4 - 04/11/2014 0230 5 (51.750.00) $350.00 3.5 2 779.46 04/11/2014 0:30 55.06 6350.00 36.55 2 763.69 04/11/2014 0:31 4.23 (61,460.50) 6350.00 2.97 2 793.16 04/11/2014 0:31 9.5 6350.00 6.65 2 793.21 04/11/2014 0:31 0.012 (64.20) 6350.00 0.01 2 797.22 04/11/2014 0:31 4.01005 (61,403.52) 6350.00 2.61 2 620 04/11/2014 0:31 22.76760679 (67,975.66) 6350.00 15.96 2 730.29 04/1 172014 1:14 -89.7175 633,105.77 - $369.00 66.22 2 620 04/11/2014 2:34 -110.282 640,694.23 6369.00 61.39 2 616.31 04/11/2014 12:37 -3.69116 $1,567.20 $430.00 3.16 2 616.3 04/11/2014 12:37 -0.00854 63.67 6430.00 0.01 2 616.3 04/11/2014 12:37 0.00654 $3.67 6430.00 0.01 2 616.29 04/11/2014 12:37 0.00654 63.67 6430.00 0.01 2 521.27 04/11/2014 12:37 950171 $40,857.34 $430.00 61.72 2 520 04/11/201412:37 -1.26616 6544.45 6430.00 1.09 2 466.59 04/12/2014 3:06 -31.4114 $13,769.56 6439.00 27.56 2 465.46 04/12/2014 3:06 311409 61,367.06 6439.00 2.74 2 462.14 04/12/2014 3:09 -3.34041 $1,466.44 $439.00 2.94 2 481.96 04/12/2014 3209 -0.1742 $76.47 $439.00 0.16 2 464.55 04/12/2014 3:09 47.4152 $7,645.26 $439.00 15.3 2 459.74 04/12/2014 3:09 -4.80777 62,110.61 6439.00 4.23 2 447.56 04/12/2014 3:09 -12.16 65,336.26 6439.00 10.66 2 447.08 04/12/2014 3:10 ~0.50351 - $221.04 $439.00 0.45 2 436.72 04/12/2014 3:10 -8.35358 $3,667.22 $439.00 7.34 2 437.96 04/1 212014 3:10 . -0.75966 $333.49 5439.00 0.67 2 432.02 04/12/2014 3:11 -594 $2,607.66 6439.00 5.22 2 420 04/12/2014 3:15 42.0202 . $5,276.88 6439.00 10.56 2 466.19 04/13/2014 11:25 46.16117934 6420.00 40.46 2 611.23 04/13/2014 11:25 143.0405106 (660.077.01) 6420.00 120.16 2 641.23 04/1 312014 11:25 30 . 6420.00 25.2 2 651.5 04/13/2014 11:25 10.2736655 (64.31494) 6420.00 6.63 2 721.5 04/13/2014 1 1:25 70 (62940000) 6420.00 56.6 2 729 04/13/2014 11 :25 7.5046446 (6315195) 6420.00 6.31 2 641.04 04/14/2014 4:49 67.9596 636,174.54 6434.00 76.35 2 636.04 04/14/2014 4:49 .5 62,170.00 6434.00 4.34 ge90 of 95 A -MAG Documentl Filed03/25/15 Pa 15-mj-7ogzo Case3 Appendix CARL FORCE BitStamp Account Analysis i .. I '71 [19153555353 711:7" WI 777" 14335113133} L. i 8319331161 - 3B1 - "$1515. L, 2.- 2 604.17 04/14/2014 4:49 -31.8714 $13,832.19 $434.00 27.67 2 603.97 04/14/2014 4:49 -0.2 $86.80 $434.00 0.18 2 602.84 04/14/2014 4:49 -1.13717 $493.53 $434.00 0.99 2 588.99 04/14/2014 4:49 -1 3.8502 $6,010.97 $434.00 12.03 2 575.73 04/14/2014 4:49 -13.2562 $5,753.20 $434.00 11.51 2 570.84 4:49 4.88558 $2,120.34 $434.00 4.25 2 559.78 04/14/2014 4:50 -1 1.0645 $4,802.00 $434.00 9.61 2 559.58 04/14/2014 4:50 -0.2 $86.80 $434.00 0.18 2 554.45 04/14/2014 4:50 -5.13001 $2,226.42 $434.00 4.46 2 429 04/14/2014 4:50 -125.445 $54,443.20 $434.00 108.89 2 329 6:47 -100 $47,500.00 $475.00 95 552 04I16I2014 17:50 222.9989 . 0 2 652 04/21/2014 10:10 100 $490.00 98 1 652 04/24/2014 12:44 0 72 Patno's BTC 2 680.3 04/25/2014 3:30 28.29535967 $484.00 27.39 2 688.87 04l25l2014 3:30 8.56889 $484.00 8.3 2 708.07 04l25l2014 3:31 19.19926 $484.00 18.59 2 715.15 04/25/2014 3:31 7.08807 $484.00 6.87 2 752 . 04/25/2014 3:31 36.84842033 $484.00 35.67 2 755.69 04/25/2014 3:42 3.68853733 $475.00 3.51 2 778.53 04l25l2014 3:42 22.83435055 $475.00 21.7 2 789.22 04l25l2014 3:42 1069839175 $475.00 10.17 2 793.5 04l25l2014 3:42 4.27682414 $475.00 4.07 2 793.51 04/25/2014 3:42 0.01 $475.00 0.01 2 804.21 04l25l2014 3:42 10.70367265 $475.00 10.17 2 851.92 04l25l2014 3:42 47.70322358 $475.00 45.32 2 852 04/25/2014 3:42 0.085 ($40.38) $475.00 0.09 2 873.16 04/25/2014 4:20 21 .15334622 $465.00 19.68 2 883.16 04l25l2014 4:20 10 $465.00 9.3 2 888.16 04/25/2014 4:20 5 $465.00 4.65 2 891.15 04l25l2014 4:20 . 2.991 $465.00 2.79 2 891.25 04l25l2014 4:20 0.101582 ($47.24) $465.00 0.1 2 903.25 04l25l2014 4220 12.002 $465.00 1 1.17 2 907.33 04/25/2014 4:20 4.07771979 $465.00 3.8 2 907.41' 04/25/2014 4:20 0.08 ($37.20) $465.00 0.08 2 909.79 04l25l2014 4:20 . 2.38168 $465.00 2.22 2 919.09 04l25l2014 4:20 9302713478 $4,325.79) $465.00 8.66 2 922.46 04l25l2014 4:20 3.36785622 566.05) $465.00 3.14 2 932.25 04l25l2014 4:20 9.79 $465.00 9.11 2 934.82 04l25l2014 4:20 2.57183 $465.00 2.4 2 935.02 04/25/2014 4:20 0.2 ($93.00) $465.00 0.19 2 935.12 04/25/2014 4:20 0.101938 ($47.40) $465.00 0.1 2 939.92 04125/2014 4:20 4.8 . $465.00 4.47 2 949.92 04l25l2014 4:20 10 $465.00 9.3 2 954 04/25/2014 4:20 4.07828299 $465.00 3.8 2 988.24 04l25l2014 1 1:1 1 34.2355074 $450.00 30.82 2 1038.24 04l25l2014 11:11 50 $450.00 45 2 1038.33 04l25l2014 11:1 1 0.088 ($39.60) $450.00 0.08 2 1050 04/25/2014 11:1 1 11.6764926 $450.00 10.51 2 1054 04/25/2014 11:11 4 $450.00 3.6 ge91 of 95 A A -70370-MAG Documentl Filed03/25/15 Pa 15?mj Case3 Appendix CARL FORCE BitStamp Account Analysis .165 5115'?; 21735191119": 95711911999515- [marm- :31 3.551311 31201290599112.1965?5 f. "51199111.. 2 1125.91 04/25/2014 11:14 72.9055128 8445.00 54.59 2 1141.85 04/25/201411:14 14.94249534 $445.00 13.3 2 1 154 04/25/2014 11 :14 12.15189086 $445.00 10.52 2 1124.54 04/25/2014 20:12 -294552 $13,512.93 $452.00 27.23 2 952.03 04/25/2014 20:13 452.503 $75,075.58 $452.00 150.15 2 954 04/25/2014 20:14 -8.03137 $3,710.49 $452.00 7.43 2 953.74 04/28/2014 4:33 -0.25 $111.29 3428.04 0.23 2 951.22 04/28/20144233 2.52147 $1,079.19 $428.00 2.15 2 950.95 04/28/2014 4:33 .0275 $117.70 $428.00 0.24 2 944.25 04/28/2014 4:33 57 $2,857.50 $428.00 5.74 2 944.05 4:33 -02 $85.50 8428.00 0.18 2 943.75 04/28/2014 4:34 03014 $129.00 8428.00 0.25 2 943.55 04/28/2014 4:34 -0.2 $85.50 $428.00 0.18 2 940.85 04l28/2014 4:35 27 $1,155.50 $428.00 2.32 2 857.09 04/28/2014 4:35 -73751 $31,555.43 $428.00 53.14 2 853.19 04/28/2014 4:35 -3.90713 $1,572.25 $428.00 3.35 2 833 04I28l2014 4:35 -30.1829 $12,918.28 $428.00 25.84 1 833 04/29/201413:12 0 3. 180.97 1 433 04/29/2014 13:41 400 3- Ending Balance 433 2775.380513 4289.499 14495.55193 40719.1 $5,484,584.87 CaseB:15-mj-70370-MAG Documentl Filed03/25/15 PageQZ of 95 i ,g i i 9/17/2013 20:08 14rE7qu4a6P2 7q WCCs sends 154 BTC to . 770 BTC (worth approx'mate'y 9/17/2013 20:09 i. $97,000 on 5?1 9/15/2013) . Per records obtained sends 154.0005 BTC to from the Silk Road E. marketplace and Ross Ulbricht's 9/20/2013, 23:29 laptoPl the 770 48 BTC deposited into bitcoms tra nsactron into bitcoins address These BTC were also 14!? 7qu4a 5P2 7 WC 9/ 17/ 2013 20:11 traced to Silk Road wallets. - appears to the - - Frenchmaid .This transaction was a withdrawal made by Ross Ulbricht frorn Silk Road. -MAG Documentl Filed03/25/15..\ Page93 of95 9/17/2013 20:12 7W0 The sum of these A 9/15/2013, 2:10 sends 154.0005 BTC to L0 UTC) payments to 1N4hIADZanB74gl/Red :5 14rE7qu406P27qWC ?5 is 520 BTC. Total BTC deposited into l4rE7qu4a6P27qWC sly/2013 20.13 I sends 160.999 BTC to . iFR6u38Dph4rl/ZJ All times are UTC (Coordinated Universal Time) 9/22/2013 00:52 sends 154 BTC to 17p1Dgvame5DQBz u9vc2q9TzJe9vn5ct This address received other deposits, for a .1 total of 388.9995 BTC 9/ 22/ 2013 00:56 13QGtr5qut3uwsz82P sends 154 BTC to uAaLX167rhuP1f 9/ 22/ 2013 1:08 UyDEeiszy7ctP6p sends 146.9995 BTC to 9/ 22/ 2013 1:17 .- sends 154 BTC to 1L9prQdaszQT401mT 9/ 22/ 2013 1:17 1 7 YngiMzVo iFR6u33Dph4rV2J sends 160.9985 BTC to 5NCq5fL66wrN4n 9/29/2013 18:10 1 7p1 Dgvame5DC23zu9 vc2q9TzJe9vn5ct sends 189 BTC to WKybolZXAl/Tl? This is Carl Mark Force?s CampBX address 9/29/2013 23:17 17p1 Dgvame50032u9 vc2q9TzJeSvn5ct sends 154 BTC to YZN mh52NHZwik13qL This is Carl Mark Force?s CampBX address - In?A?zy?L?f 9/23/2013, 13:13 sends 194.9995 BTC to $3TXach8$9p This is Carl Mark Force's CampBX address 9/ 29/2013, 23:14 1L9prQdaszQT4olmT XZBA qUVEkz9m6x$ sends 154 BTC to mh52NHZwik13qL This is Carl Mark Force's Ca address 9/29/2013, 23:13 sends 160.9985 BTC to mh52NHZwik13qL This is Carl Mark Force's Cam Case3:15-mj-70370-MAG Documentl Filed03/25/15 1 A "y I r. Appr . I I 2 Amount 41': anonymous marketplace I . January 25, 2013 t. pail?5.7 I .1511} .k ad, 20,073 bitcoins are stolen from Silk Road . . . and Silk Road vendors and deposited into bitcoins address 3/8/2013 98,958.00 5 44.00 2249.27 .11, 2' 330372003 993953952 4639.24 - 3/18/2013 99,968.74 51.00 1950.17 January 26, 2013 1,475 bitcoins are sent from January 26, 2013 . i] another 955 are sent from ?s 3 . . . 2. 704.00 4/5/2013 99368 98? 7 14 00.1 7 zthc/7j4A into MtGox bitcoins address into MtGox bitcoins address I '5 ?7 . . Gc mesi GcQmesi mrhE Mama mrhEszfr?tB 4/25/2013 99,969.32 136.00 735.07 ?wfm' ,1}qu .Q 7 1,11 211091390? 233454.91 13289.15 As of January 26, 2013, account *if sold on the day controls at least 2,430 stolen bitcoins it was wired out 79370-MAG Documentl FiledOB/ZS/lg Page95 of 95 1? 3 Between March and May of 2013, L) account May 9, 2013 an makes 9 wires to Quantum International LLC, into Shaun Bridges' Fidelity Account BRIDGES served as the affiant on a multi-million dollar seizure warrant for Mt. Gox and its owner?s bank accounts